A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libcaca | Aug 22, 2024 | Feb 23, 2021 |
| Debian | — | Upgrade libcaca | Mar 8, 2021 | Feb 23, 2021 |
| Freebsd | — | Upgrade libcaca | Feb 8, 2025 | Feb 7, 2025 |
| Gentoo Linux | — | Upgrade media-libs/libcaca. | Feb 19, 2024 | Feb 23, 2021 |
| Suse | — | Upgrade caca-utilsUpgrade libcaca0-32bitUpgrade libcaca-develUpgrade python3-cacaUpgrade libcaca0-plugins-32bitUpgrade libcaca0Upgrade libcaca-rubyUpgrade libcaca0-plugins | Mar 9, 2022 | Feb 23, 2021 |
| Ubuntu | — | Upgrade libcaca0 (Ubuntu Pro)Upgrade caca-utils (Ubuntu Pro)Upgrade libcaca0Upgrade caca-utils | Apr 21, 2021 | Feb 23, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub