A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libXpm-develUpgrade motif-staticUpgrade motifUpgrade libXpmUpgrade motif-devel | May 8, 2024 | Oct 10, 2023 |
| Alpine Linux | — | Upgrade libxpm | Mar 26, 2024 | Oct 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libXpm-debuginfoUpgrade libXpm-develUpgrade libXpm | Oct 23, 2023 | Oct 10, 2023 |
| Amazon_linux | — | Upgrade libXpm | Dec 5, 2023 | Oct 10, 2023 |
| Amazon_linux_2023 | — | Upgrade libXpmUpgrade libXpm-develUpgrade libXpm-debugsourceUpgrade libXpm-debuginfoUpgrade libXpm-devel-debuginfo | Feb 17, 2025 | Oct 4, 2023 |
| Debian | — | Upgrade libxpm | Oct 6, 2023 | Oct 6, 2023 |
| Freebsd | — | Upgrade libXpm | Oct 12, 2023 | Oct 12, 2023 |
| Gentoo Linux | — | Upgrade x11-libs/libXpm. | Aug 8, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 12, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 13, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Oracle_linux | — | Upgrade motif-staticUpgrade libXpmUpgrade libXpm-develUpgrade motifUpgrade motif-devel | May 7, 2024 | Oct 4, 2023 |
| Redhat_linux | — | No solution existsUpgrade libXpm-develUpgrade libXpm-debuginfoUpgrade libXpm-debugsourceUpgrade libXpmUpgrade motif-develUpgrade libXpm-devel-debuginfoUpgrade motif-staticUpgrade motif-debuginfoUpgrade motif-debugsourceUpgrade motif-devel-debuginfoUpgrade motif | May 1, 2024 | Oct 10, 2023 |
| Rocky_linux | — | Upgrade motif-debuginfoUpgrade libXpmUpgrade libXpm-devel-debuginfoUpgrade motif-develUpgrade motifUpgrade libXpm-debugsourceUpgrade libXpm-debuginfoUpgrade motif-devel-debuginfoUpgrade motif-debugsourceUpgrade motif-staticUpgrade libXpm-devel | Jun 17, 2024 | Oct 10, 2023 |
| Suse | — | Upgrade libXpm-toolsUpgrade libXpm4-32bitUpgrade libXpm-devel-32bitUpgrade libXpm4Upgrade libXpm-devel | Oct 5, 2023 | Oct 4, 2023 |
| Ubuntu | — | Upgrade libxpm4 (Ubuntu Pro)Upgrade libxpm4 | Oct 4, 2023 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub