Debian Chafa vulnerabilities

3 known vulnerabilities affecting debian/chafa.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW3

Vulnerabilities

Page 1 of 1

CVE-2022-2061LOWCVSS 3.3fixed in chafa 1.12.1-1 (bookworm)2022

CVE-2022-2061 [LOW] CVE-2022-2061: chafa - Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. Scope: local bookworm: resolved (fixed in 1.12.1-1) bullseye: open forky: resolved (fixed in 1.12.1-1) sid: resolved (fixed in 1.12.1-1) trixie: resolved (fixed in 1.12.1-1)

CVE-2022-1507LOWCVSS 5.5fixed in chafa 1.10.2-1 (bookworm)2022

CVE-2022-1507 [MEDIUM] CVE-2022-1507: chafa - chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgi... chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a

CVE-2022-2301LOWCVSS 5.5fixed in chafa 1.10.3-1 (bookworm)2022

CVE-2022-2301 [MEDIUM] CVE-2022-2301: chafa - Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. Scope: local bookworm: resolved (fixed in 1.10.3-1) bullseye: open forky: resolved (fixed in 1.10.3-1) sid: resolved (fixed in 1.10.3-1) trixie: resolved (fixed in 1.10.3-1)