BSD Portslibcaca -- Multiple vulnerabilities
· CVE-2018-20545, CVE-2018-20546, CVE-2018-20547, CVE-2018-20548, CVE-2018-20549, CVE-2021-3410, CVE-2021-30498, CVE-2021-30499 · VuXML entry
Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: CVE-2018-20545: Illegal WRITE memory access at common-image.c CVE-2018-20546: Illegal READ memory access at caca/dither.c CVE-2018-20547: Illegal READ memory access at caca/dither.c CVE-2018-20548: Illegal WRITE memory access at common-image.c CVE-2018-20549: Illegal WRITE memory access at caca/file.c CVE-2021-3410: Buffer overflow in …
Affected versions
- libcaca < 0.99.b20
By system
0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | graphics/libcaca | 0.99.b20_1 | fixed | |
| OpenBSD | graphics/libcaca | 0.99.20p1 | out of range, by version | |
| NetBSD | graphics/libcaca | 0.99.20 | not listed | |
| MidnightBSD | graphics/libcaca | 0.99.b19_3 | in range, by version | |
| FreeBSD | graphics/libcaca | 0.99.b20_1 | fixed |