Page MenuHome

Logical Bugs in Parsing process in Blender-Thumbnailer
Closed, ResolvedPublic

Description

System Information
Operating system: Ubuntu 20.04.4 LTS
Graphics card: 2b:00.0 VGA compatible controller: NVIDIA Corporation TU116 [GeForce GTX 1650 SUPER] (rev a1)

Blender Version
Broken: 3.3.0 Alpha commit 0e9367fc29bc42c80e10b7097facec2b029a7362 Date: Fri Jul 15 10:04:50 2022 +1200

Short description of error

  • blend-thumbnailing logical bugs reproduce when met some format in header.
./blender-thumbnailer ./trigger.blend ~/test.png

Exact steps for others to reproduce the error

  1. include some format "REND" in .blend header
  2. convert this .blend file to thumb-nail image using blender-thumbnailer

Effect
Can abuse DDOS Attack that resuming connection infinitely

POC Videos below
https://youtu.be/4E4n4nxK5N0

POC blendfile below