A flaw was found in libXpm. When processing a file with width of 0 and a very large height some parser functions will be called repeatedly and can lead to an infinite loop resulting in a Denial of Service in the application linked to the library.

🗓️ 07 Feb 2023 08:00:00Reported by MicrosoftType

A flaw in libXpm causes an infinite loop and Denial of Service for width zero and large height files.

Reporter	Title	Published	Views	Family All 166
FreeBSD	libXpm -- Issues handling XPM files	17 Jan 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Vulnerability in libXpm (CVE-2022-4883, CVE-2022-44617 and CVE-2022-46285) affects Power HMC	27 Apr 202302:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities have been identified in OpenSSL, Apache HTTP Server and other system libraries shipped with the DS8000 Hardware Management Console (HMC)	12 Jul 202311:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation v2.4.4 fixes multiple security vulnerabilities	2 Mar 202309:08	–	ibm
Tenable Nessus	Amazon Linux 2023 : libXpm, libXpm-devel (ALAS2023-2023-107)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libXpm (ALAS-2023-1962)	23 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libXpm (ALAS-2023-1693)	23 Feb 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0011: libXpm (ALINUX3-SA-2023:0011)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libXpm (ALSA-2023:0379)	24 Jan 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : libXpm (ALSA-2023:0383)	25 Jan 202300:00	–	nessus