Lucene search

PRIOn knowledge basePRION:CVE-2023-43788

HistoryOct 10, 2023 - 1:15 p.m.

Design/Logic Flaw

2023-10-1013:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

libxpm

local attacker

out-of-bounds read

memory error

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

CPENameOperatorVersion
fedoraeq37
fedoraeq38
fedoraeq39
enterprise_linuxeq8.0
enterprise_linuxeq9.0
libxpmlt3.5.17

Name	Operator	Version
fedora	eq	37
fedora	eq	38
fedora	eq	39
enterprise_linux	eq	8.0
enterprise_linux	eq	9.0
libxpm	lt	3.5.17

References

access.redhat.com/security/cve/CVE-2023-43788

bugzilla.redhat.com/show_bug.cgi?id=2242248

lists.fedoraproject.org/archives/list/[email protected]/message/63IBRFLQVZSMOAZBZOBKFWJP26ILRAGQ/

lists.fedoraproject.org/archives/list/[email protected]/message/I3KFUQT42R7TB4D7RISNSBQFJGLTQGUL/

lists.fedoraproject.org/archives/list/[email protected]/message/TFAJTBNO3PAIA6EGZR4PN62H6RLKNDTE/

lists.fedoraproject.org/archives/list/[email protected]/message/V6FARGWN7VWXXWPXYNEEDJLRR3EWFZ3T/

lists.fedoraproject.org/archives/list/[email protected]/message/ZECBCLDYUGLDSVV75ECPIBW7JXOB3747/