CVE:CVE-2021-3410
CNNVD:CNNVD-202102-1491
libcaca是开源的一个软件库。可将图像转换为彩色ASCII艺术品。
libcaca v0.99.beta19 存在输入验证错误漏洞，该漏洞源于libcaca caca canvas.c中的caca resize函数中的缓冲区溢出问题可能导致在用户上下文中执行任意代码。
solution:Upgrade libcaca_project libcaca to a higher version than 0.99:beta19,and avoid the version 0.99:beta19; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35