A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libxpmalma-upgrade-libxpm-devel | Jan 25, 2023 | Jan 23, 2023 | |
| Alpine Linux | alpine-linux-upgrade-libxpm | Mar 26, 2024 | Feb 6, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxpmamazon-linux-ami-2-upgrade-libxpm-debuginfoamazon-linux-ami-2-upgrade-libxpm-devel | Feb 23, 2023 | Feb 6, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-libxpm | Feb 23, 2023 | Jan 17, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxpmamazon-linux-2023-upgrade-libxpm-debuginfoamazon-linux-2023-upgrade-libxpm-debugsourceamazon-linux-2023-upgrade-libxpm-develamazon-linux-2023-upgrade-libxpm-devel-debuginfo | Feb 17, 2025 | Jan 17, 2023 | |
| Centos_linux | — | centos-upgrade-libxpmcentos-upgrade-libxpm-debuginfocentos-upgrade-libxpm-debugsourcecentos-upgrade-libxpm-develcentos-upgrade-libxpm-devel-debuginfo | Jan 24, 2023 | Jan 23, 2023 |
| Debian | debian-upgrade-libxpm | Jun 21, 2023 | Feb 6, 2023 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Freebsd | freebsd-upgrade-package-libxpm | Mar 24, 2023 | Mar 23, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-libs-libxpm | Aug 8, 2024 | Feb 6, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxpm | Mar 20, 2023 | Feb 6, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libxpm | May 8, 2023 | Feb 6, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libxpmhuawei-euleros-2_0_sp5-upgrade-libxpm-devel | Jun 9, 2023 | Feb 6, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxpmhuawei-euleros-2_0_sp8-upgrade-libxpm-devel | Apr 13, 2023 | Feb 6, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxpm | Mar 9, 2023 | Feb 6, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libxpmoracle-linux-upgrade-libxpm-devel | Jan 24, 2023 | Jan 17, 2023 |
| Redhat_linux | redhat-upgrade-libxpmredhat-upgrade-libxpm-debuginforedhat-upgrade-libxpm-debugsourceredhat-upgrade-libxpm-develredhat-upgrade-libxpm-devel-debuginfo | Jan 24, 2023 | Jan 23, 2023 | |
| Rocky_linux | rocky-upgrade-libxpmrocky-upgrade-libxpm-debuginforocky-upgrade-libxpm-debugsourcerocky-upgrade-libxpm-develrocky-upgrade-libxpm-devel-debuginfo | Mar 12, 2024 | Feb 6, 2023 | |
| Suse | — | suse-upgrade-libxpm-develsuse-upgrade-libxpm-devel-32bitsuse-upgrade-libxpm-toolssuse-upgrade-libxpm4suse-upgrade-libxpm4-32bit | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libxpm4ubuntu-pro-upgrade-xpmutilsubuntu-upgrade-libxpm4 | Jan 18, 2023 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub