Lucene search
Veracode Vulnerability DatabaseVERACODE:29487HistoryFeb 25, 2021 - 2:19 a.m.
Arbitrary Code Execution
2021-02-2502:19:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
buffer overflow issue
denial of service
libcaca.so vulnerability
EPSS
0
Percentile
5.1%
libcaca.so is vulnerable to denial of service (DoS). An attacker is able to input a malicious string to call the caca_import_canvas_from_memory() function, causing a buffer overflow issue in the caca_resize function in libcaca/caca/canvas.c.
References
bugzilla.redhat.com/show_bug.cgi?id=1928437
github.com/cacalabs/libcaca/issues/52
lists.debian.org/debian-lts-announce/2021/03/msg00006.html
lists.fedoraproject.org/archives/list/[email protected]/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/
lists.fedoraproject.org/archives/list/[email protected]/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/
lists.fedoraproject.org/archives/list/[email protected]/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/
Related
nessus
nessus
SUSE SLED15 / SLES15 Security Update : libcaca (SUSE-SU-2022:3400-1)
2022-09-27 00:00:00
GLSA-202402-19 : libcaca: Arbitary Code Execution
2024-02-18 00:00:00
Debian DLA-2584-1 : libcaca security update
2021-03-08 00:00:00
openvas
openvas
openSUSE: Security Advisory for libcaca (SUSE-SU-2022:3400-1)
2022-09-27 00:00:00
Debian: Security Advisory (DLA-2584-1)
2021-03-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3400-1)
2022-09-27 00:00:00
ubuntu
ubuntu
libcaca vulnerability
2021-04-20 00:00:00
cvelist
cvelist
CVE-2021-3410
2021-02-23 22:22:18
suse
suse
Security update for libcaca (moderate)
2022-09-26 00:00:00
prion
prion
Buffer overflow
2021-02-23 23:15:00
alpinelinux
alpinelinux
CVE-2021-3410
2021-02-23 23:15:14
gentoo
gentoo
libcaca: Arbitary Code Execution
2024-02-18 00:00:00
debian
debian
[SECURITY] [DLA 2584-1] libcaca security update
2021-03-07 06:04:49
osv
osv
CVE-2021-3410
2021-02-23 23:15:14
libcaca - security update
2021-03-07 00:00:00
libcaca vulnerability
2021-04-20 15:41:45
nvd
nvd
CVE-2021-3410
2021-02-23 23:15:14
mageia
mageia
Updated libcaca packages fix a security vulnerability
2021-03-12 04:25:47
debiancve
debiancve
CVE-2021-3410
2021-02-23 23:15:14
ubuntucve
ubuntucve
CVE-2021-3410
2021-02-23 00:00:00
cve
cve
CVE-2021-3410
2021-02-23 23:15:14
rosalinux
rosalinux
Advisory ROSA-SA-2021-1864
2021-07-02 17:11:23
fedora
fedora
[SECURITY] Fedora 36 Update: libcaca-0.99-0.59.beta20.fc36
2022-03-26 15:52:03
[SECURITY] Fedora 34 Update: libcaca-0.99-0.59.beta20.fc34
2022-03-23 00:01:52
[SECURITY] Fedora 35 Update: libcaca-0.99-0.59.beta20.fc35
2022-03-22 23:46:50