A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libXpm-develUpgrade motifUpgrade motif-staticUpgrade motif-develUpgrade libXpm | May 8, 2024 | Oct 10, 2023 |
| Alpine Linux | — | Upgrade libxpm | Mar 26, 2024 | Oct 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libXpmUpgrade libXpm-develUpgrade libXpm-debuginfo | Oct 23, 2023 | Oct 10, 2023 |
| Amazon_linux | — | Upgrade libXpm | Dec 5, 2023 | Oct 10, 2023 |
| Amazon_linux_2023 | — | Upgrade libXpmUpgrade libXpm-develUpgrade libXpm-devel-debuginfoUpgrade libXpm-debuginfoUpgrade libXpm-debugsource | Feb 17, 2025 | Oct 4, 2023 |
| Debian | — | Upgrade libxpm | Oct 6, 2023 | Oct 6, 2023 |
| Freebsd | — | Upgrade libXpm | Oct 12, 2023 | Oct 12, 2023 |
| Gentoo Linux | — | Upgrade x11-libs/libXpm. | Aug 8, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 12, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 13, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Oracle_linux | — | Upgrade libXpmUpgrade motif-staticUpgrade motifUpgrade motif-develUpgrade libXpm-devel | May 7, 2024 | Oct 4, 2023 |
| Redhat_linux | — | Upgrade motif-debuginfoUpgrade motif-devel-debuginfoUpgrade motif-staticUpgrade motif-debugsourceUpgrade motifNo solution existsUpgrade motif-develUpgrade libXpmUpgrade libXpm-debugsourceUpgrade libXpm-debuginfoUpgrade libXpm-devel-debuginfoUpgrade libXpm-devel | May 1, 2024 | Oct 10, 2023 |
| Rocky_linux | — | Upgrade motif-develUpgrade libXpm-debugsourceUpgrade motif-debuginfoUpgrade libXpmUpgrade libXpm-devel-debuginfoUpgrade motifUpgrade motif-devel-debuginfoUpgrade motif-debugsourceUpgrade libXpm-debuginfoUpgrade libXpm-develUpgrade motif-static | Jun 17, 2024 | Oct 10, 2023 |
| Suse | — | Upgrade libXpm-toolsUpgrade libXpm4-32bitUpgrade libXpm-devel-32bitUpgrade libXpm-develUpgrade libXpm4 | Oct 5, 2023 | Oct 4, 2023 |
| Ubuntu | — | Upgrade libxpm4 (Ubuntu Pro)Upgrade libxpm4 | Oct 4, 2023 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub