CVE-2018-20546
- Source
- https://cve.org/CVERecord?id=CVE-2018-20546
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20546.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-20546
- Downstream
DEBIAN (1)
MGASA (1)
openSUSE (2)
UBUNTU (1)
- Related
- Published
- 2018-12-28T16:29:04Z
- Modified
- 2026-08-07T16:50:38Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "12.04" }, { "last_affected": "12.04" }, { "introduced": "14.04" }, { "last_affected": "14.04" }, { "introduced": "16.04" }, { "last_affected": "16.04" }, { "introduced": "18.04" }, { "last_affected": "18.04" }, { "introduced": "18.10" }, { "last_affected": "18.10" } ], "source": "CPE_STRING", "vendor_product": "canonical:ubuntu_linux" }, { "cpes": [ "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ], "source": "CPE_STRING", "vendor_product": "debian:debian_linux" }, { "cpes": [ "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "34" }, { "last_affected": "34" }, { "introduced": "35" }, { "last_affected": "35" }, { "introduced": "36" }, { "last_affected": "36" } ], "source": "CPE_STRING", "vendor_product": "fedoraproject:fedora" }, { "cpes": [ "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "15.0" }, { "last_affected": "15.0" } ], "source": "CPE_STRING", "vendor_product": "opensuse:leap" } ] }- References
-
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html
- https://github.com/cacalabs/libcaca/issues/38
- https://lists.debian.org/debian-lts-announce/2019/01/msg00007.html
- https://usn.ubuntu.com/3860-1/
- https://usn.ubuntu.com/3860-2/
- https://bugzilla.redhat.com/show_bug.cgi?id=1652622
- https://github.com/cacalabs/libcaca/commit/1022d97496c7899e8641515af363381b31ae2f05
Affected packages
Git / github.com/cacalabs/libcaca
Affected ranges
- Type
- GIT
- Repo
- https://github.com/cacalabs/libcaca
- Events
-
IntroducedLast AffectedFixed
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:libcaca_project:libcaca:0.99:beta19:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0.99-beta19" }, { "last_affected": "0.99-beta19" } ], "source": [ "CPE_STRING", "REFERENCES" ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20546.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"173697194705099104683245377240136433543",
"127033609259635894559715003375059074023",
"249858520968027005030518387805073278911",
"278457499550985249528788813404705222476",
"26662475878361700816840939041688976160"
],
"threshold": 0.9
},
"id": "CVE-2018-20546-16db8665",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/cacalabs/libcaca/commit/1022d97496c7899e8641515af363381b31ae2f05",
"target": {
"file": "caca/dither.c"
}
}
]
vanir_signatures_modified
"2026-08-07T16:50:38Z"