A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.

🗓️ 08 Feb 2023 08:00:00Reported by MicrosoftType

A flaw in libXpm allows infinite loop and denial of service when parsing a file with an unclosed comment.

Reporter	Title	Published	Views	Family All 169
0day.today	Solaris 10 dtprintinfo / libXm / libXpm Security Issues Vulnerability	22 Jan 202300:00	–	zdt
FreeBSD	libXpm -- Issues handling XPM files	17 Jan 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Vulnerability in libXpm (CVE-2022-4883, CVE-2022-44617 and CVE-2022-46285) affects Power HMC	27 Apr 202302:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities have been identified in OpenSSL, Apache HTTP Server and other system libraries shipped with the DS8000 Hardware Management Console (HMC)	12 Jul 202311:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation v2.4.4 fixes multiple security vulnerabilities	2 Mar 202309:08	–	ibm
Tenable Nessus	Amazon Linux 2023 : libXpm, libXpm-devel (ALAS2023-2023-107)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libXpm (ALAS-2023-1962)	23 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libXpm (ALAS-2023-1693)	23 Feb 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0011: libXpm (ALINUX3-SA-2023:0011)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libXpm (ALSA-2023:0379)	24 Jan 202300:00	–	nessus