There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libcaca | Nov 27, 2019 | Dec 28, 2018 |
| Debian | — | Upgrade libcaca | Feb 20, 2019 | Dec 28, 2018 |
| Freebsd | — | Upgrade libcaca | Feb 8, 2025 | Feb 7, 2025 |
| Suse | — | Upgrade libcaca-rubyUpgrade libcaca0-pluginsUpgrade libcaca0Upgrade libcaca0-32bitUpgrade caca-utilsUpgrade libcaca-develUpgrade libcaca0-plugins-32bitUpgrade python3-caca | Apr 5, 2019 | Dec 28, 2018 |
| Ubuntu | — | Upgrade libcaca0Upgrade caca-utils | Jan 24, 2019 | Dec 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub