Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libxpm | Aug 30, 2017 | Feb 1, 2017 | |
| Centos_linux | — | centos-upgrade-drm-utilscentos-upgrade-libdrmcentos-upgrade-libdrm-debuginfocentos-upgrade-libdrm-develcentos-upgrade-libepoxycentos-upgrade-libepoxy-debuginfocentos-upgrade-libepoxy-develcentos-upgrade-libevdevcentos-upgrade-libevdev-debuginfocentos-upgrade-libevdev-develcentos-upgrade-libevdev-utilscentos-upgrade-libfontenccentos-upgrade-libfontenc-debuginfocentos-upgrade-libfontenc-develcentos-upgrade-libicecentos-upgrade-libice-debuginfocentos-upgrade-libice-develcentos-upgrade-libinputcentos-upgrade-libinput-debuginfocentos-upgrade-libinput-develcentos-upgrade-libvdpaucentos-upgrade-libvdpau-debuginfocentos-upgrade-libvdpau-develcentos-upgrade-libvdpau-docscentos-upgrade-libwacomcentos-upgrade-libwacom-datacentos-upgrade-libwacom-debuginfocentos-upgrade-libwacom-develcentos-upgrade-libx11centos-upgrade-libx11-commoncentos-upgrade-libx11-debuginfocentos-upgrade-libx11-develcentos-upgrade-libxawcentos-upgrade-libxaw-debuginfocentos-upgrade-libxaw-develcentos-upgrade-libxcbcentos-upgrade-libxcb-debuginfocentos-upgrade-libxcb-develcentos-upgrade-libxcb-doccentos-upgrade-libxcursorcentos-upgrade-libxcursor-debuginfocentos-upgrade-libxcursor-develcentos-upgrade-libxdmcpcentos-upgrade-libxdmcp-debuginfocentos-upgrade-libxdmcp-develcentos-upgrade-libxfixescentos-upgrade-libxfixes-debuginfocentos-upgrade-libxfixes-develcentos-upgrade-libxfontcentos-upgrade-libxfont-debuginfocentos-upgrade-libxfont-develcentos-upgrade-libxfont2centos-upgrade-libxfont2-debuginfocentos-upgrade-libxfont2-develcentos-upgrade-libxicentos-upgrade-libxi-debuginfocentos-upgrade-libxi-develcentos-upgrade-libxkbcommoncentos-upgrade-libxkbcommon-debuginfocentos-upgrade-libxkbcommon-develcentos-upgrade-libxkbcommon-x11centos-upgrade-libxkbcommon-x11-develcentos-upgrade-libxkbfilecentos-upgrade-libxkbfile-debuginfocentos-upgrade-libxkbfile-develcentos-upgrade-libxpmcentos-upgrade-libxpm-debuginfocentos-upgrade-libxpm-develcentos-upgrade-libxrandrcentos-upgrade-libxrandr-debuginfocentos-upgrade-libxrandr-develcentos-upgrade-libxrendercentos-upgrade-libxrender-debuginfocentos-upgrade-libxrender-develcentos-upgrade-libxtcentos-upgrade-libxt-debuginfocentos-upgrade-libxt-develcentos-upgrade-libxtstcentos-upgrade-libxtst-debuginfocentos-upgrade-libxtst-develcentos-upgrade-libxvcentos-upgrade-libxv-debuginfocentos-upgrade-libxv-develcentos-upgrade-libxvmccentos-upgrade-libxvmc-debuginfocentos-upgrade-libxvmc-develcentos-upgrade-libxxf86vmcentos-upgrade-libxxf86vm-debuginfocentos-upgrade-libxxf86vm-develcentos-upgrade-mesa-debuginfocentos-upgrade-mesa-dri-driverscentos-upgrade-mesa-filesystemcentos-upgrade-mesa-libeglcentos-upgrade-mesa-libegl-develcentos-upgrade-mesa-libgbmcentos-upgrade-mesa-libgbm-develcentos-upgrade-mesa-libglcentos-upgrade-mesa-libgl-develcentos-upgrade-mesa-libglapicentos-upgrade-mesa-libglescentos-upgrade-mesa-libgles-develcentos-upgrade-mesa-libosmesacentos-upgrade-mesa-libosmesa-develcentos-upgrade-mesa-libxatrackercentos-upgrade-mesa-libxatracker-develcentos-upgrade-mesa-private-llvmcentos-upgrade-mesa-private-llvm-debuginfocentos-upgrade-mesa-private-llvm-develcentos-upgrade-mesa-vulkan-driverscentos-upgrade-vulkancentos-upgrade-vulkan-debuginfocentos-upgrade-vulkan-develcentos-upgrade-vulkan-filesystemcentos-upgrade-xcb-protocentos-upgrade-xkeyboard-configcentos-upgrade-xkeyboard-config-develcentos-upgrade-xorg-x11-proto-devel | Aug 28, 2019 | Feb 1, 2017 |
| Debian | debian-upgrade-libxpm | Jan 27, 2017 | Jan 26, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-libs-libxpm | Oct 30, 2017 | Feb 1, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libicehuawei-euleros-2_0_sp1-upgrade-libice-develhuawei-euleros-2_0_sp1-upgrade-libxdmcphuawei-euleros-2_0_sp1-upgrade-libxpmhuawei-euleros-2_0_sp1-upgrade-libxpm-devel | Nov 30, 2017 | Feb 1, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libicehuawei-euleros-2_0_sp2-upgrade-libice-develhuawei-euleros-2_0_sp2-upgrade-libxdmcphuawei-euleros-2_0_sp2-upgrade-libxpmhuawei-euleros-2_0_sp2-upgrade-libxpm-devel | Nov 30, 2017 | Feb 1, 2017 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-motifhuawei-euleros-2_0_sp8-upgrade-motif-devel | Mar 13, 2024 | Feb 1, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-x11-library-libxpm-3-5-11-0-175-3-20-0-2-1526 | May 29, 2017 | Feb 1, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-drm-utilsoracle-linux-upgrade-libdrmoracle-linux-upgrade-libdrm-develoracle-linux-upgrade-libepoxyoracle-linux-upgrade-libepoxy-develoracle-linux-upgrade-libevdevoracle-linux-upgrade-libevdev-develoracle-linux-upgrade-libevdev-utilsoracle-linux-upgrade-libfontencoracle-linux-upgrade-libfontenc-develoracle-linux-upgrade-libiceoracle-linux-upgrade-libice-develoracle-linux-upgrade-libinputoracle-linux-upgrade-libinput-develoracle-linux-upgrade-libvdpauoracle-linux-upgrade-libvdpau-develoracle-linux-upgrade-libvdpau-docsoracle-linux-upgrade-libwacomoracle-linux-upgrade-libwacom-dataoracle-linux-upgrade-libwacom-develoracle-linux-upgrade-libx11oracle-linux-upgrade-libx11-commonoracle-linux-upgrade-libx11-develoracle-linux-upgrade-libxaworacle-linux-upgrade-libxaw-develoracle-linux-upgrade-libxcboracle-linux-upgrade-libxcb-develoracle-linux-upgrade-libxcb-docoracle-linux-upgrade-libxcursororacle-linux-upgrade-libxcursor-develoracle-linux-upgrade-libxdmcporacle-linux-upgrade-libxdmcp-develoracle-linux-upgrade-libxfixesoracle-linux-upgrade-libxfixes-develoracle-linux-upgrade-libxfontoracle-linux-upgrade-libxfont2oracle-linux-upgrade-libxfont2-develoracle-linux-upgrade-libxfont-develoracle-linux-upgrade-libxioracle-linux-upgrade-libxi-develoracle-linux-upgrade-libxkbcommonoracle-linux-upgrade-libxkbcommon-develoracle-linux-upgrade-libxkbcommon-x11oracle-linux-upgrade-libxkbcommon-x11-develoracle-linux-upgrade-libxkbfileoracle-linux-upgrade-libxkbfile-develoracle-linux-upgrade-libxpmoracle-linux-upgrade-libxpm-develoracle-linux-upgrade-libxrandroracle-linux-upgrade-libxrandr-develoracle-linux-upgrade-libxrenderoracle-linux-upgrade-libxrender-develoracle-linux-upgrade-libxtoracle-linux-upgrade-libxt-develoracle-linux-upgrade-libxtstoracle-linux-upgrade-libxtst-develoracle-linux-upgrade-libxvoracle-linux-upgrade-libxv-develoracle-linux-upgrade-libxvmcoracle-linux-upgrade-libxvmc-develoracle-linux-upgrade-libxxf86vmoracle-linux-upgrade-libxxf86vm-develoracle-linux-upgrade-mesa-dri-driversoracle-linux-upgrade-mesa-filesystemoracle-linux-upgrade-mesa-libegloracle-linux-upgrade-mesa-libegl-develoracle-linux-upgrade-mesa-libgbmoracle-linux-upgrade-mesa-libgbm-develoracle-linux-upgrade-mesa-libgloracle-linux-upgrade-mesa-libglapioracle-linux-upgrade-mesa-libgl-develoracle-linux-upgrade-mesa-libglesoracle-linux-upgrade-mesa-libgles-develoracle-linux-upgrade-mesa-libosmesaoracle-linux-upgrade-mesa-libosmesa-develoracle-linux-upgrade-mesa-libxatrackeroracle-linux-upgrade-mesa-libxatracker-develoracle-linux-upgrade-mesa-private-llvmoracle-linux-upgrade-mesa-private-llvm-develoracle-linux-upgrade-mesa-vulkan-driversoracle-linux-upgrade-vulkanoracle-linux-upgrade-vulkan-develoracle-linux-upgrade-vulkan-filesystemoracle-linux-upgrade-xcb-protooracle-linux-upgrade-xkeyboard-configoracle-linux-upgrade-xkeyboard-config-develoracle-linux-upgrade-xorg-x11-proto-devel | Aug 8, 2017 | Dec 12, 2016 |
| Redhat_linux | — | redhat-upgrade-drm-utilsredhat-upgrade-libdrmredhat-upgrade-libdrm-debuginforedhat-upgrade-libdrm-develredhat-upgrade-libepoxyredhat-upgrade-libepoxy-debuginforedhat-upgrade-libepoxy-develredhat-upgrade-libevdevredhat-upgrade-libevdev-debuginforedhat-upgrade-libevdev-develredhat-upgrade-libevdev-utilsredhat-upgrade-libfontencredhat-upgrade-libfontenc-debuginforedhat-upgrade-libfontenc-develredhat-upgrade-libiceredhat-upgrade-libice-debuginforedhat-upgrade-libice-develredhat-upgrade-libinputredhat-upgrade-libinput-debuginforedhat-upgrade-libinput-develredhat-upgrade-libvdpauredhat-upgrade-libvdpau-debuginforedhat-upgrade-libvdpau-develredhat-upgrade-libvdpau-docsredhat-upgrade-libwacomredhat-upgrade-libwacom-dataredhat-upgrade-libwacom-debuginforedhat-upgrade-libwacom-develredhat-upgrade-libx11redhat-upgrade-libx11-commonredhat-upgrade-libx11-debuginforedhat-upgrade-libx11-develredhat-upgrade-libxawredhat-upgrade-libxaw-debuginforedhat-upgrade-libxaw-develredhat-upgrade-libxcbredhat-upgrade-libxcb-debuginforedhat-upgrade-libxcb-develredhat-upgrade-libxcb-docredhat-upgrade-libxcursorredhat-upgrade-libxcursor-debuginforedhat-upgrade-libxcursor-develredhat-upgrade-libxdmcpredhat-upgrade-libxdmcp-debuginforedhat-upgrade-libxdmcp-develredhat-upgrade-libxfixesredhat-upgrade-libxfixes-debuginforedhat-upgrade-libxfixes-develredhat-upgrade-libxfontredhat-upgrade-libxfont-debuginforedhat-upgrade-libxfont-develredhat-upgrade-libxfont2redhat-upgrade-libxfont2-debuginforedhat-upgrade-libxfont2-develredhat-upgrade-libxiredhat-upgrade-libxi-debuginforedhat-upgrade-libxi-develredhat-upgrade-libxkbcommonredhat-upgrade-libxkbcommon-debuginforedhat-upgrade-libxkbcommon-develredhat-upgrade-libxkbcommon-x11redhat-upgrade-libxkbcommon-x11-develredhat-upgrade-libxkbfileredhat-upgrade-libxkbfile-debuginforedhat-upgrade-libxkbfile-develredhat-upgrade-libxpmredhat-upgrade-libxpm-debuginforedhat-upgrade-libxpm-develredhat-upgrade-libxrandrredhat-upgrade-libxrandr-debuginforedhat-upgrade-libxrandr-develredhat-upgrade-libxrenderredhat-upgrade-libxrender-debuginforedhat-upgrade-libxrender-develredhat-upgrade-libxtredhat-upgrade-libxt-debuginforedhat-upgrade-libxt-develredhat-upgrade-libxtstredhat-upgrade-libxtst-debuginforedhat-upgrade-libxtst-develredhat-upgrade-libxvredhat-upgrade-libxv-debuginforedhat-upgrade-libxv-develredhat-upgrade-libxvmcredhat-upgrade-libxvmc-debuginforedhat-upgrade-libxvmc-develredhat-upgrade-libxxf86vmredhat-upgrade-libxxf86vm-debuginforedhat-upgrade-libxxf86vm-develredhat-upgrade-mesa-debuginforedhat-upgrade-mesa-dri-driversredhat-upgrade-mesa-filesystemredhat-upgrade-mesa-libeglredhat-upgrade-mesa-libegl-develredhat-upgrade-mesa-libgbmredhat-upgrade-mesa-libgbm-develredhat-upgrade-mesa-libglredhat-upgrade-mesa-libgl-develredhat-upgrade-mesa-libglapiredhat-upgrade-mesa-libglesredhat-upgrade-mesa-libgles-develredhat-upgrade-mesa-libosmesaredhat-upgrade-mesa-libosmesa-develredhat-upgrade-mesa-libxatrackerredhat-upgrade-mesa-libxatracker-develredhat-upgrade-mesa-private-llvmredhat-upgrade-mesa-private-llvm-debuginforedhat-upgrade-mesa-private-llvm-develredhat-upgrade-mesa-vulkan-driversredhat-upgrade-vulkanredhat-upgrade-vulkan-debuginforedhat-upgrade-vulkan-develredhat-upgrade-vulkan-filesystemredhat-upgrade-xcb-protoredhat-upgrade-xkeyboard-configredhat-upgrade-xkeyboard-config-develredhat-upgrade-xorg-x11-proto-devel | Aug 5, 2017 | Jan 26, 2017 |
| Suse | — | suse-upgrade-libxpm-develsuse-upgrade-libxpm-toolssuse-upgrade-libxpm4suse-upgrade-libxpm4-32bitsuse-upgrade-xorg-x11-libxpmsuse-upgrade-xorg-x11-libxpm-32bitsuse-upgrade-xorg-x11-libxpm-develsuse-upgrade-xorg-x11-libxpm-devel-32bitsuse-upgrade-xorg-x11-libxpm-x86 | Feb 16, 2017 | Jan 26, 2017 |
| Ubuntu | ubuntu-upgrade-libxpm4 | Feb 2, 2017 | Jan 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub