Solaris 10 dtprintinfo / libXm / libXpm Security Issues

-- HNS-2022-01 - HN Security Advisory - https://security.humanativaspa.it/ Title: Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm Products: Common Desktop Environment 1.6, Motif 2.1, X.Org libXpm Date: 2023-01-18 Oracle vulnerability tracking numbers: S1597707 - Arbitrary printer...

Slackware: Security Advisory (SSA:2023-018-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] libXpm

New libXpm packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libXpm-3.5.15-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Infinite loop on unclosed comments...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current libXpm Multiple Vulnerabilities (SSA:2023-018-03)

The version of libXpm installed on the remote host is prior to 3.5.15. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-018-03 advisory. - A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compre...

Ubuntu: Security Advisory (USN-5807-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-46285

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...

CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

CVE-2022-4883

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH...

USN-5807-1 libxpm vulnerabilities

Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. CVE-2022-44617 Marc...

USN-5807-1: libXpm vulnerabilities

Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. CVE-2022-44617 Marc...

UBUNTU-CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

CVE-2022-46285

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...

libXpm 安全漏洞

libXpm is an image file format library from lib open source. A security vulnerability exists in libXpm. An attacker exploited the vulnerability to cause an application denial of service...

PT-2023-1171

Name of the Vulnerable Software and Affected Versions libXpm affected versions not specified Description A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to...

PT-2023-1172

Name of the Vulnerable Software and Affected Versions libXpm affected versions not specified Description A flaw was found in libXpm. When processing a file with a width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a...

CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

CVE-2022-4883

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH...

libXpm 安全漏洞

libXpm is an image file format library from lib open source. A security vulnerability exists in libXpm. An attacker exploited the vulnerability to cause an application denial of service...

PT-2023-1173

Name of the Vulnerable Software and Affected Versions libXpm affected versions not specified Description The issue is related to a flaw in the libXpm library, specifically in the ParseComment function, which can lead to an infinite loop when parsing a file with an unclosed comment. This can resul...

libXpm 代码问题漏洞

libXpm is a lib open source image file format library. A code issue vulnerability exists in libXpm. An attacker could exploit this vulnerability to execute other programs by manipulating the PATH environment variable...