A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libXpmUpgrade libXpm-devel | Jan 25, 2023 | Jan 23, 2023 |
| Alpine Linux | — | Upgrade libxpm | Mar 26, 2024 | Feb 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libXpm-debuginfoUpgrade libXpm-develUpgrade libXpm | Feb 23, 2023 | Feb 6, 2023 |
| Amazon_linux | — | Upgrade libXpm | Feb 23, 2023 | Jan 17, 2023 |
| Amazon_linux_2023 | — | Upgrade libXpm-devel-debuginfoUpgrade libXpmUpgrade libXpm-debugsourceUpgrade libXpm-debuginfoUpgrade libXpm-devel | Feb 17, 2025 | Jan 17, 2023 |
| Centos_linux | — | Upgrade libXpm-debugsourceUpgrade libXpmUpgrade libXpm-develUpgrade libXpm-devel-debuginfoUpgrade libXpm-debuginfo | Jan 24, 2023 | Jan 23, 2023 |
| Debian | — | Upgrade libxpm | Jun 21, 2023 | Feb 6, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade libXpm | Mar 24, 2023 | Mar 23, 2023 |
| Gentoo Linux | — | Upgrade x11-libs/libXpm. | Aug 8, 2024 | Feb 6, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Mar 20, 2023 | Feb 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | May 8, 2023 | Feb 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | — | Jun 9, 2023 | Feb 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 13, 2023 | Feb 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Mar 9, 2023 | Feb 6, 2023 |
| Oracle_linux | — | Upgrade libXpmUpgrade libXpm-devel | Jan 24, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade libXpm-develNo solution existsUpgrade libXpm-debugsourceUpgrade libXpmUpgrade libXpm-devel-debuginfoUpgrade libXpm-debuginfo | Jan 24, 2023 | Jan 23, 2023 |
| Rocky_linux | — | Upgrade libXpmUpgrade libXpm-debugsourceUpgrade libXpm-devel-debuginfoUpgrade libXpm-develUpgrade libXpm-debuginfo | Mar 12, 2024 | Feb 6, 2023 |
| Suse | — | Upgrade libXpm4-32bitUpgrade libXpm-toolsUpgrade libXpm4Upgrade libXpm-devel-32bitUpgrade libXpm-devel | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade xpmutils (Ubuntu Pro)Upgrade libxpm4 (Ubuntu Pro)Upgrade libxpm4 | Jan 18, 2023 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub