CVE-2022-0856 Denial of service in libcaca
A divide-by-zero error in libcaca's img2txt tool allows remote attackers to cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-0856?
CVE-2022-0856 is a medium-severity denial of service vulnerability in Fedoraproject Fedora, published on 8 Mar 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service
Weakness: CWE-369
Which versions are affected by CVE-2022-0856?
It affects 2 products.
Linux distribution packages (7)
libcaca SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 0.99.beta19.git20171003-150200.11.6.1 |
libcaca SUSE:Linux Enterprise Real Time 15 SP2 | All versions | 0.99.beta19.git20171003-150200.11.6.1 |
libcaca SUSE:Linux Enterprise Server 12 SP5 | All versions | 0.99.beta18-14.9.1 |
libcaca SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 0.99.beta18-14.9.1 |
libcaca SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 0.99.beta18-14.9.1 |
libcaca openSUSE:Leap 15.3 | All versions | 0.99.beta19.git20171003-150200.11.6.1 |
libcaca openSUSE:Leap 15.4 | All versions | 0.99.beta19.git20171003-150200.11.6.1 |
Products include Fedoraproject Fedora, Libcaca Project Libcaca.
How do I fix CVE-2022-0856?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-0856 being exploited?
There is no known exploitation of CVE-2022-0856 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as DEBIAN-CVE-2022-0856, ECHO-d40e-0bf5-74be, GHSA-p2c9-9qhg-mq4q, MGASA-2022-0172, SUSE-SU-2022:1476-1, SUSE-SU-2022:1508-1 and 3 more.