PT-2018-2596 · Libcaca+3 · Libcaca+3

Published 2018-11-22 · Updated 2024-06-15 · CVE-2018-20544

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libcaca version 0.99.beta19

Description The issue is related to a division by zero error in the caca dither bitmap function, located in caca/dither.c, of the libcaca graphic library. This error can lead to a denial of service. The vulnerability can be exploited by a remote attacker.

Recommendations For libcaca version 0.99.beta19, as a temporary workaround, consider disabling the caca dither bitmap function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BDU:2019-01072

CVE-2018-20544

DLA-1631-1

MGASA-2019-0050

OPENSUSE-SU-2019:1144-1

OPENSUSE-SU-2019_1144-1

OPENSUSE-SU-2024:10927-1

SUSE-SU-2019:0770-1

SUSE-SU-2019:2745-1

SUSE-SU-2019:2745-2

SUSE-SU-2019_0770-1

SUSE-SU-2019_2745-1

SUSE-SU-2019_2745-2

USN-3860-1

USN-3860-2

Affected Products

Astra Linux

Suse

Ubuntu

Libcaca

References · 82

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1652627 · Exploit
• https://usn.ubuntu.com/3860-2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20548 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-20544 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-1631-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01072 · Security Note
• https://security-tracker.debian.org/tracker/source-package/libcaca · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01622 · Security Note
• https://advisories.mageia.org/MGASA-2019-0050.html · Security Note
• https://osv.dev/vulnerability/USN-3860-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-20547 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2745-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3860-2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20544 · Security Note
• https://bdu.fstec.ru/vul/2019-01075 · Security Note