A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libXpm-develUpgrade motif-develUpgrade motif-staticUpgrade motifUpgrade libXpm | May 8, 2024 | Oct 10, 2023 |
| Alpine Linux | — | Upgrade libxpm | Mar 26, 2024 | Oct 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libXpm-develUpgrade libXpm-debuginfoUpgrade libXpm | Oct 23, 2023 | Oct 10, 2023 |
| Amazon_linux | — | Upgrade libXpm | Dec 5, 2023 | Oct 10, 2023 |
| Amazon_linux_2023 | — | Upgrade libXpm-debuginfoUpgrade libXpm-devel-debuginfoUpgrade libXpm-debugsourceUpgrade libXpm-develUpgrade libXpm | Feb 17, 2025 | Oct 4, 2023 |
| Debian | — | Upgrade libxpm | Oct 6, 2023 | Oct 6, 2023 |
| Freebsd | — | Upgrade libXpm | Oct 12, 2023 | Oct 12, 2023 |
| Gentoo Linux | — | Upgrade x11-libs/libXpm. | Aug 8, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 12, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 13, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Oracle_linux | — | Upgrade motifUpgrade libXpm-develUpgrade motif-develUpgrade libXpmUpgrade motif-static | May 7, 2024 | Oct 4, 2023 |
| Redhat_linux | — | Upgrade libXpmUpgrade libXpm-debuginfoUpgrade libXpm-debugsourceNo solution existsUpgrade libXpm-develUpgrade motif-develUpgrade libXpm-devel-debuginfoUpgrade motif-staticUpgrade motif-devel-debuginfoUpgrade motif-debuginfoUpgrade motif-debugsourceUpgrade motif | May 1, 2024 | Oct 10, 2023 |
| Rocky_linux | — | Upgrade libXpm-develUpgrade motif-devel-debuginfoUpgrade motif-staticUpgrade motif-debugsourceUpgrade libXpm-debuginfoUpgrade motif-develUpgrade motifUpgrade libXpm-debugsourceUpgrade libXpm-devel-debuginfoUpgrade libXpmUpgrade motif-debuginfo | Jun 17, 2024 | Oct 10, 2023 |
| Suse | — | Upgrade libXpm-toolsUpgrade libXpm4-32bitUpgrade libXpm4Upgrade libXpm-develUpgrade libXpm-devel-32bit | Oct 5, 2023 | Oct 4, 2023 |
| Ubuntu | — | Upgrade libxpm4Upgrade libxpm4 (Ubuntu Pro) | Oct 4, 2023 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub