6.5
CVE-2022-0856
- EPSS 2.75%
- Veröffentlicht 10.03.2022 17:44:57
- Zuletzt bearbeitet 21.11.2024 06:39:32
- Quelle patrick@puiterwijk.org
- CVE-Watchlists
- Unerledigt
libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libcaca Project ≫ Libcaca Version0.99 Updatebeta20
Fedoraproject ≫ Fedora Version37
Fedoraproject ≫ Fedora Version38
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.75% | 0.843 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-369 Divide By Zero
The product divides a value by zero.
https://github.com/cacalabs/libcaca/issues/65
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3E5GF2LSX2ZEY5JZNM7HXJMLHMY436X/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTDRPVX3HCYLQCLMQ6NNSRC3B7L6WGUM/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFOFTTMHO666HB3TVHBMCES6GCKG5PPG/