Amazon Linux 2 : libXpm (ALAS-2023-2295)

The version of libXpm installed on the remote host is prior to 3.5.12-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2295 advisory. libX11: integer overflow in XCreateImage leading to a heap overflow. CVE-2023-43787 libXpm: out of bounds read in...

Medium: libXpm

Issue Overview: libX11: integer overflow in XCreateImage leading to a heap overflow. CVE-2023-43787 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1 NOTE: Fixed by:...

CVE-2023-43789

creationtimestamp| type| source ---|---|--- 2023-10-12 16:23:09+00:00| seen| https://t.me/cibsecurity/72168 2025-08-12 02:52:31+00:00| seen| https://gist.github.com/runlevel5/6017be6a89d79a2a9c8eadf55aaae9e2...

CVE-2023-43789

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system...

FreeBSD : x11/libXpm multiple vulnerabilities (199cdb4d-690d-11ee-9ed0-001fc69cd6dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 199cdb4d-690d-11ee-9ed0-001fc69cd6dc advisory. - A vulnerability was found in libXpm due to a boundary condition within the...

[SECURITY] [DSA 5516-1] libxpm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5516-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2023 https://www.debian.org/security/faq -...

SUSE SLED15: libXpm-devel / libXpm-devel-32bit / libXpm-tools / libXpm4 / etc (SUSE-SU-2023:3965-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3965-1 advisory. - CVE-2023-43788: Fixed an out of bounds read when creating an image bsc1215686. - CVE-2023-4378...

Debian DSA-5516-1 : libxpm - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5516 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable...

SUSE: Security Advisory (SUSE-SU-2023:3962-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:3965-1 Security update for libXpm

This update for libXpm fixes the following issues: - CVE-2023-43788: Fixed an out of bounds read when creating an image bsc1215686. - CVE-2023-43789: Fixed an out of bounds read when parsing an XPM file with a corrupted colormap bsc1215687...

USN-6408-1 libxpm vulnerabilities

Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to consume memory, leading to a denial of service. CVE-2023-43786 Yair Mizrahi...

USN-6408-1: libXpm vulnerabilities

Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to consume memory, leading to a denial of service. CVE-2023-43786 Yair Mizrahi...

x11/libXpm multiple vulnerabilities

The X.Org project reports: CVE-2023-43788: Out of bounds read in XpmCreateXpmImageFromBuffer An out-of-bounds read is located in ParseComment when reading from a memory buffer instead of a file, as it continued to look for the closing comment marker past the end of the buffer. CVE-2023-43789: Out...

Exploit for SQL Injection in Prestashop

CVE-2021-43789 Prestashop = 1.7.5.0 = 5.0 AND error-based -...

CVE-2021-43789

creationtimestamp| type| source ---|---|--- 2021-12-07 20:22:07+00:00| seen| https://t.me/cibsecurity/33488...

CVE-2021-43789 Blind SQLi using Search filters in PrestaShop

PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with orderBy and sortOrder parameters. The problem is fixed in version 1.7.8.2...

CVE-2021-43789

CVE-2021-43789 affects PrestaShop prior to 1.7.8.2. The vulnerability is a blind SQL injection in search filters using the responsible parameters, specifically through the fields “orderBy” and “sortOrder.” The issue is fixed in version 1.7.8.2. Public references and OSV/GHSA entries reiterate the...