A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade motif-staticUpgrade libXpmUpgrade motifUpgrade motif-develUpgrade libXpm-devel | May 8, 2024 | Oct 10, 2023 |
| Alpine Linux | — | Upgrade libxpm | Mar 26, 2024 | Oct 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libXpm-debuginfoUpgrade libXpm-develUpgrade libXpm | Oct 23, 2023 | Oct 10, 2023 |
| Amazon_linux | — | Upgrade libXpm | Dec 5, 2023 | Oct 10, 2023 |
| Amazon_linux_2023 | — | Upgrade libXpm-debuginfoUpgrade libXpm-debugsourceUpgrade libXpm-devel-debuginfoUpgrade libXpmUpgrade libXpm-devel | Feb 17, 2025 | Oct 4, 2023 |
| Debian | — | Upgrade libxpm | Oct 6, 2023 | Oct 6, 2023 |
| Freebsd | — | Upgrade libXpm | Oct 12, 2023 | Oct 12, 2023 |
| Gentoo Linux | — | Upgrade x11-libs/libXpm. | Aug 8, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 12, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 13, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Oracle_linux | — | Upgrade libXpm-develUpgrade motif-develUpgrade motifUpgrade motif-staticUpgrade libXpm | May 7, 2024 | Oct 4, 2023 |
| Redhat_linux | — | Upgrade motif-devel-debuginfoUpgrade motif-debugsourceUpgrade motif-staticUpgrade motifUpgrade motif-debuginfoUpgrade libXpmNo solution existsUpgrade libXpm-debugsourceUpgrade motif-develUpgrade libXpm-develUpgrade libXpm-devel-debuginfoUpgrade libXpm-debuginfo | May 1, 2024 | Oct 10, 2023 |
| Rocky_linux | — | Upgrade motif-debugsourceUpgrade motif-devel-debuginfoUpgrade libXpm-develUpgrade motif-staticUpgrade libXpm-debuginfoUpgrade motifUpgrade libXpm-debugsourceUpgrade motif-debuginfoUpgrade libXpmUpgrade libXpm-devel-debuginfoUpgrade motif-devel | Jun 17, 2024 | Oct 10, 2023 |
| Suse | — | Upgrade libXpm4-32bitUpgrade libXpm-toolsUpgrade libXpm4Upgrade libXpm-develUpgrade libXpm-devel-32bit | Oct 5, 2023 | Oct 4, 2023 |
| Ubuntu | — | Upgrade libxpm4Upgrade libxpm4 (Ubuntu Pro) | Oct 4, 2023 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub