CVE-2021-30498

A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences.

CVSS v3 7.8 HIGH
CVSS v2.0 6.8 MEDIUM

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1948675	Issue Tracking Third Party Advisory
https://github.com/cacalabs/libcaca/issues/53	Exploit Issue Tracking Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/	Mailing List Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1948675	Issue Tracking Third Party Advisory
https://github.com/cacalabs/libcaca/issues/53	Exploit Issue Tracking Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/	Mailing List Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:libcaca_project:libcaca:0.99:beta14::::::
	cpe:2.3:a:libcaca_project:libcaca:0.99:beta15::::::
	cpe:2.3:a:libcaca_project:libcaca:0.99:beta16::::::
	cpe:2.3:a:libcaca_project:libcaca:0.99:beta17::::::
	cpe:2.3:a:libcaca_project:libcaca:0.99:beta18::::::
	cpe:2.3:a:libcaca_project:libcaca:0.99:beta19::::::

Configuration 2 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:34:::::::*
	cpe:2.3:o:fedoraproject:fedora:35:::::::*
	cpe:2.3:o:fedoraproject:fedora:36:::::::*

History

21 Nov 2024, 06:04

Type	Values Removed	Values Added
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=1948675 - Issue Tracking, Third Party Advisory~~	() https://bugzilla.redhat.com/show_bug.cgi?id=1948675 - Issue Tracking, Third Party Advisory
References	~~() https://github.com/cacalabs/libcaca/issues/53 - Exploit, Issue Tracking, Third Party Advisory~~	() https://github.com/cacalabs/libcaca/issues/53 - Exploit, Issue Tracking, Third Party Advisory
References	~~() https://lists.debian.org/debian-lts-announce/2024/04/msg00004.html -~~	() https://lists.debian.org/debian-lts-announce/2024/04/msg00004.html -
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - Mailing List, Third Party Advisory~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - Mailing List, Third Party Advisory
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - Mailing List, Third Party Advisory~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - Mailing List, Third Party Advisory
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/ - Mailing List, Third Party Advisory~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/ - Mailing List, Third Party Advisory

07 Apr 2024, 10:15

Type	Values Removed	Values Added
References		() https://lists.debian.org/debian-lts-announce/2024/04/msg00004.html -

13 Dec 2023, 21:27

Type	Values Removed	Values Added
References	~~(MISC) https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ -~~	(MISC) https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - Mailing List, Third Party Advisory
References	~~(MISC) https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/ -~~	(MISC) https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/ - Mailing List, Third Party Advisory
References	~~(MISC) https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ -~~	(MISC) https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - Mailing List, Third Party Advisory

Information

Published : 2021-05-26 22:15

Updated : 2024-11-21 06:04

NVD link : CVE-2021-30498

Mitre link : CVE-2021-30498

CVE.ORG link : CVE-2021-30498

JSON object : View

Products Affected

libcaca_project

libcaca

fedoraproject

fedora

CWE

CWE-787

Out-of-bounds Write

7.8 /10