There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libcaca | Nov 27, 2019 | Dec 28, 2018 |
| Debian | — | Upgrade libcaca | Jul 30, 2024 | Dec 28, 2018 |
| Freebsd | — | Upgrade libcaca | Feb 8, 2025 | Feb 7, 2025 |
| Suse | — | Upgrade libcaca0-pluginsUpgrade python3-cacaUpgrade caca-utilsUpgrade libcaca0-plugins-32bitUpgrade libcaca0-32bitUpgrade libcaca-rubyUpgrade libcaca0Upgrade libcaca-devel | Apr 5, 2019 | Dec 28, 2018 |
| Ubuntu | — | Upgrade caca-utilsUpgrade libcaca0 | Jan 24, 2019 | Dec 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub