A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade motif-develUpgrade libXpmUpgrade motif-staticUpgrade motifUpgrade libXpm-devel | May 8, 2024 | Oct 10, 2023 |
| Alpine Linux | — | Upgrade libxpm | Mar 26, 2024 | Oct 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libXpm-debuginfoUpgrade libXpm-develUpgrade libXpm | Oct 23, 2023 | Oct 10, 2023 |
| Amazon_linux | — | Upgrade libXpm | Dec 5, 2023 | Oct 10, 2023 |
| Amazon_linux_2023 | — | Upgrade libXpm-debugsourceUpgrade libXpm-debuginfoUpgrade libXpm-devel-debuginfoUpgrade libXpm-develUpgrade libXpm | Feb 17, 2025 | Oct 4, 2023 |
| Debian | — | Upgrade libxpm | Oct 6, 2023 | Oct 6, 2023 |
| Freebsd | — | Upgrade libXpm | Oct 12, 2023 | Oct 12, 2023 |
| Gentoo Linux | — | Upgrade x11-libs/libXpm. | Aug 8, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 12, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 13, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Oracle_linux | — | Upgrade motif-staticUpgrade libXpmUpgrade motif-develUpgrade motifUpgrade libXpm-devel | May 7, 2024 | Oct 4, 2023 |
| Redhat_linux | — | Upgrade libXpm-develUpgrade motif-develNo solution existsUpgrade libXpm-debuginfoUpgrade libXpm-debugsourceUpgrade libXpm-devel-debuginfoUpgrade libXpmUpgrade motif-debugsourceUpgrade motif-devel-debuginfoUpgrade motif-debuginfoUpgrade motifUpgrade motif-static | May 1, 2024 | Oct 10, 2023 |
| Rocky_linux | — | Upgrade libXpm-devel-debuginfoUpgrade libXpmUpgrade motif-debuginfoUpgrade motifUpgrade motif-develUpgrade libXpm-debugsourceUpgrade libXpm-develUpgrade motif-staticUpgrade libXpm-debuginfoUpgrade motif-debugsourceUpgrade motif-devel-debuginfo | Jun 17, 2024 | Oct 10, 2023 |
| Suse | — | Upgrade libXpm-devel-32bitUpgrade libXpm-develUpgrade libXpm4Upgrade libXpm4-32bitUpgrade libXpm-tools | Oct 5, 2023 | Oct 4, 2023 |
| Ubuntu | — | Upgrade libxpm4 (Ubuntu Pro)Upgrade libxpm4 | Oct 4, 2023 | Oct 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub