CVE:CVE-2020-35628
CNNVD:CNNVD-202103-366
CGAL是一个应用软件。提供通过C ++库的形式轻松访问高效且可靠的几何算法的功能。
CGAL 5.1.1 存在输入验证错误漏洞，该漏洞源于Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->incident_sface，攻击者可利用该漏洞提供恶意输入，以执行代码。
solution:Upgrade cgal computational_geometry_algorithms_library to a higher version than 5.1.1,and avoid the version 5.1.1; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0