CVE-2022-2833

NameCVE-2022-2833
DescriptionEndless Infinite loop in Blender-thumnailing due to logical bugs.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
blender (PTS)buster, buster (security)2.79.b+dfsg0-7+deb10u1vulnerable
bullseye (security), bullseye2.83.5+dfsg-5+deb11u1vulnerable
sid3.2.2+dfsg-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
blendersource(unstable)3.2.2+dfsg-1unimportant

Notes

https://developer.blender.org/rB24a2b5cb1292f769dd86e314471443976d5e9512
https://developer.blender.org/T99711
Hang in CLI tool, no security impact

Search for package or bug name: Reporting problems