696 matches found
jfrog-CVE-2023-43786-libX11_DoS
CVE-2023-43786 Proof-of-Concept Overview This is a DoS Proof-of-Concept of libX11 Denial of Service vulnerability CVE-2023-43786. It will trigger the integer overflow and cause an infinite loop. The vulnerable versions are: libX11 1.8.6 and below and libXpm 3.5.16. For a comprehensive...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : libXpm vulnerability (USN-8862-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8862-1 advisory. It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this iss...
USN-8862-1: libXpm vulnerability
It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service...
USN-8862-1 libxpm vulnerability
It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service...
PT-2026-104825
It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service...
Rocky Linux 8 [CIQ] Security Update: libXpm / libXpm-debuginfo / libXpm-debugsource / libXpm-devel / etc Multiple Vulnerabilities (crlsa-2023_0379)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230379 advisory. libXpm: compression commands depend on $PATH CVE-2022-4883 libXpm: Runaway loop on width of 0 and enormous height CVE-2022-44617 libXpm: Infinite loop on...
Rocky Linux 8 [CIQ] Security Update: motif / motif-debuginfo / motif-debugsource / motif-devel / etc Multiple Vulnerabilities (crlsa-2024_3022)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243022 advisory. libXpm: out of bounds read in XpmCreateXpmImageFromBuffer CVE-2023-43788 libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43789 Tenable h...
AlmaLinux 9.2 [TuxCare] Security Update: libXpm / libXpm-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778167813)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778167813 advisory. - A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows ...
Rocky Linux 9 [CIQ] Security Update: libXpm / libXpm-debuginfo / libXpm-debugsource / libXpm-devel / etc Multiple Vulnerabilities (crlsa-2023_0383)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230383 advisory. libXpm: compression commands depend on $PATH CVE-2022-4883 libXpm: Runaway loop on width of 0 and enormous height CVE-2022-44617 libXpm: Infinite loop on...
Rocky Linux 8 [CIQ] Security Update: libXpm / libXpm-debuginfo / libXpm-debugsource / libXpm-devel / etc Multiple Vulnerabilities (crlsa-2024_2974)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242974 advisory. libXpm: out of bounds read in XpmCreateXpmImageFromBuffer CVE-2023-43788 libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43789 Tenable h...
Rocky Linux 9 [CIQ] Security Update: libXpm / libXpm-debuginfo / libXpm-debugsource / libXpm-devel / etc Multiple Vulnerabilities (crlsa-2024_2146)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242146 advisory. libXpm: out of bounds read in XpmCreateXpmImageFromBuffer CVE-2023-43788 libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43789 Tenable h...
Rocky Linux 8.6 [CIQ] Security Update: libXpm / libXpm-debuginfo / libXpm-debugsource / libXpm-devel / etc Multiple Vulnerabilities (ciqsa-2026_0935)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260935 advisory. This advisory aggregates security fixes for the libXpm SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2022-44617, CVE-2022-46285, CVE-2022-4883. Tenable h...
Rocky Linux 9 [CIQ] Security Update: motif / motif-debuginfo / motif-debugsource / motif-devel / etc Multiple Vulnerabilities (crlsa-2024_2217)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242217 advisory. libXpm: out of bounds read in XpmCreateXpmImageFromBuffer CVE-2023-43788 libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43789 Tenable h...
libXpm-devel-3.5.18-3.1 on GA media (moderate)
libXpm-devel-3.5.18-3.1 on GA media Announcement ID: openSUSE-SU-2026:11896-1 Rating: moderate Cross-References: CVE-2026-94287 CVSS scores: CVE-2026-94287 SUSE : 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-94287 SUSE : 6.9...
AlmaLinux 9.2 [TuxCare] Security Update: motif / motif-devel / motif-static Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779823076)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779823076 advisory. - A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows ...
ROOT-OS-ALPINE-318-CVE-2023-43788 CVE-2023-43788 in libxpm - Patched by Root
Root has patched CVE-2023-43788 in the libxpm package for Root:Alpine:3.18. Multiple fixed versions available...
Linux Distros Unpatched Vulnerability : CVE-2026-94287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memo...
CVE-2026-94287
A flaw was found in libXpm. An unsigned integer underflow vulnerability exists in the library's write path when processing image data. A local attacker could exploit this issue by convincing a user or application to process a specially crafted file, causing unbounded CPU and memory consumption th...
