Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2024-1017)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2024-1043)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2023-3279)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2023-3312)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2023-3251)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2023-3344)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: libXpm

Issue Overview: libXpm: out of bounds read in XpmCreateXpmImageFromBuffer NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1 NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/2fa554b01ef6079a9b35df9332bdc4f139ed67e0 CVE-2023-43788 Affected Packages: libXpm Issue...

Fedora 39 : motif (2023-e1c7fae02e)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e1c7fae02e advisory. Security fix for CVE-2023-43788 and CVE-2023-43789 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Amazon Linux AMI : libXpm (ALAS-2023-1894)

The version of libXpm installed on the remote host is prior to 3.5.10-2.13. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1894 advisory. libXpm: out of bounds read in XpmCreateXpmImageFromBuffer NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1NOTE: Fix...

Fedora 37 : motif (2023-25329c196b)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-25329c196b advisory. Security fix for CVE-2023-43788 and CVE-2023-43789 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 38 : motif (2023-ba2e60e743)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ba2e60e743 advisory. Security fix for CVE-2023-43788 and CVE-2023-43789 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Out-of-bounds Read

libXpm is vulnerable to Out-of-bounds Read. The vulnerability is caused due to a boundary condition that can be exploited to read contents of memory of the system. An attacker can trigger this out-of-bounds read error compromising confidentiality of the system...

Out-of-bounds Read

libxpm is vulnerable to Out-of-bounds Read. The vulnerability is due to insufficient validation, incorrect handling of input data of buffer sizes within XpmCreateXpmImageFromBuffer function. This flaw allows an attacker to trigger an out-of-bounds read error via specially crafted input and read t...

NewStart CGSL MAIN 6.06 : libXpm Multiple Vulnerabilities (NS-SA-2023-0144)

The remote NewStart CGSL host, running version MAIN 6.06, has libXpm packages installed that are affected by multiple vulnerabilities: - A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an...

CVE-2022-46285 affecting package libXpm for versions less than 3.5.17-1

CVE-2022-46285 affecting package libXpm for versions less than 3.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-4883 affecting package libXpm for versions less than 3.5.17-1

CVE-2022-4883 affecting package libXpm for versions less than 3.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-44617 affecting package libXpm for versions less than 3.5.17-1

CVE-2022-44617 affecting package libXpm for versions less than 3.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-43788 affecting package libXpm for versions less than 3.5.17-1

CVE-2023-43788 affecting package libXpm for versions less than 3.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-43789 affecting package libXpm for versions less than 3.5.17-1

CVE-2023-43789 affecting package libXpm for versions less than 3.5.17-1. An upgraded version of the package is available that resolves this issue...

Fedora 39 : libXpm (2023-c4cf6646b9)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c4cf6646b9 advisory. libXpm 3.5.17, fixes CVE-2023-43788, CVE-2023-43789, CVE-2023-43786 Tenable has extracted the preceding description block directly from the Fedora...