Most recent entries from all

ALSA-2023:0379 — Important: libXpm security update

Affected: AlmaLinux:8: libXpm, AlmaLinux:8: libXpm-devel

X.Org X11 libXpm runtime library.

Security Fix(es):

* libXpm: compression commands depend on $PATH (CVE-2022-4883) * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617) * libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-00390

Withdrawn: BELL-CVE-2022-46285 — CVE-2022-46285 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-0318 — De multiples vulnérabilités ont été découvertes dans VMware. Elles permettent à un attaquan…

certfr-2023-avi-0318

EUVD-2026-224884

fkie_cve-2022-46285

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.

GHSA-x5vr-48jx-h8wp

gsd-2022-46285

msrc_CVE-2022-46285 — A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition…

msrc_CVE-2022-46285

OESA-2023-1078 — libXpm security update

Affected: openEuler:20.03-LTS-SP1: libXpm, openEuler:20.03-LTS-SP3: libXpm, openEuler:22.03-LTS: libXpm, openEuler:22.03-LTS-SP1: libXpm

X.Org X11 libXpm runtime library Security Fix(es): A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.(CVE-2022-4883) A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.(CVE-2022-44617) A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.(CVE-2022-46285)

openSUSE-SU-2024:12617-1 — libXpm-devel-3.5.14-2.1 on GA media

libXpm-devel-3.5.14-2.1 on GA media

RHSA-2023:0378 — Red Hat Security Advisory: libXpm security update

libXpm: compression commands depend on $PATH libXpm: Runaway loop on width of 0 and enormous height libXpm: Infinite loop on unclosed comments

SUSE-SU-2023:0165-1 — Security update for libXpm

Security update for libXpm

UBUNTU-CVE-2022-46285

Affected: Ubuntu:Pro:14.04:LTS: libxpm, Ubuntu:14.04:LTS: motif, Ubuntu:Pro:16.04:LTS: libxpm, Ubuntu:16.04:LTS: motif, Ubuntu:18.04:LTS: libxpm, Ubuntu:18.04:LTS: motif, Ubuntu:20.04:LTS: libxpm, Ubuntu:20.04:LTS: motif, Ubuntu:22.04:LTS: libxpm, Ubuntu:22.04:LTS: motif and 3 more

WID-SEC-W-2023-0113 — X.Org X11: Mehrere Schwachstellen

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 in libXpm ausnutzen, um einen Denial of Service Angriff durchzuführen oder seine Rechte zu erweitern.