Name: CVE-2021-3410: Improper Restriction of Operations within the Bounds of a Memory Buffer
Creator: Rapid7
Published: 2021-02-23T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-3410, CWE-119, CWE-190, CVSS 7.8, EPSS 0.00213

A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade libcaca	Aug 22, 2024	Feb 23, 2021
Debian	—	Upgrade libcaca	Mar 8, 2021	Feb 23, 2021
Freebsd	—	Upgrade libcaca	Feb 8, 2025	Feb 7, 2025
Gentoo Linux	—	Upgrade media-libs/libcaca.	Feb 19, 2024	Feb 23, 2021
Suse	—	Upgrade caca-utilsUpgrade libcaca0-32bitUpgrade libcaca-develUpgrade python3-cacaUpgrade libcaca0-plugins-32bitUpgrade libcaca0Upgrade libcaca-rubyUpgrade libcaca0-plugins	Mar 9, 2022	Feb 23, 2021
Ubuntu	—	Upgrade libcaca0 (Ubuntu Pro)Upgrade caca-utils (Ubuntu Pro)Upgrade libcaca0Upgrade caca-utils	Apr 21, 2021	Feb 23, 2021

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business