A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libxpmalma-upgrade-libxpm-devel | Jan 25, 2023 | Jan 23, 2023 | |
| Alpine Linux | alpine-linux-upgrade-libxpm | Mar 26, 2024 | Feb 7, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxpmamazon-linux-ami-2-upgrade-libxpm-debuginfoamazon-linux-ami-2-upgrade-libxpm-devel | Feb 23, 2023 | Feb 7, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-libxpm | Feb 23, 2023 | Jan 17, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxpmamazon-linux-2023-upgrade-libxpm-debuginfoamazon-linux-2023-upgrade-libxpm-debugsourceamazon-linux-2023-upgrade-libxpm-develamazon-linux-2023-upgrade-libxpm-devel-debuginfo | Feb 17, 2025 | Jan 17, 2023 | |
| Centos_linux | — | centos-upgrade-libxpmcentos-upgrade-libxpm-debuginfocentos-upgrade-libxpm-debugsourcecentos-upgrade-libxpm-develcentos-upgrade-libxpm-devel-debuginfo | Jan 24, 2023 | Jan 23, 2023 |
| Debian | debian-upgrade-libxpm | Jun 21, 2023 | Feb 7, 2023 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Freebsd | freebsd-upgrade-package-libxpm | Mar 24, 2023 | Mar 23, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-libs-libxpm | Aug 8, 2024 | Feb 7, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxpm | Mar 20, 2023 | Feb 7, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libxpm | May 8, 2023 | Feb 7, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libxpmhuawei-euleros-2_0_sp5-upgrade-libxpm-devel | Jun 9, 2023 | Feb 7, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxpmhuawei-euleros-2_0_sp8-upgrade-libxpm-devel | Apr 13, 2023 | Feb 7, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxpm | Mar 9, 2023 | Feb 7, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libxpmoracle-linux-upgrade-libxpm-devel | Jan 24, 2023 | Jan 17, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libxpmredhat-upgrade-libxpm-debuginforedhat-upgrade-libxpm-debugsourceredhat-upgrade-libxpm-develredhat-upgrade-libxpm-devel-debuginfo | Jan 24, 2023 | Jan 23, 2023 | |
| Rocky_linux | rocky-upgrade-libxpmrocky-upgrade-libxpm-debuginforocky-upgrade-libxpm-debugsourcerocky-upgrade-libxpm-develrocky-upgrade-libxpm-devel-debuginfo | Mar 12, 2024 | Feb 7, 2023 | |
| Suse | — | suse-upgrade-libxpm-develsuse-upgrade-libxpm-devel-32bitsuse-upgrade-libxpm-toolssuse-upgrade-libxpm4suse-upgrade-libxpm4-32bit | Jan 27, 2023 | Jan 26, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libxpm4ubuntu-pro-upgrade-xpmutilsubuntu-upgrade-libxpm4 | Jan 18, 2023 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub