Lucene search

K

Veracode Vulnerability DatabaseVERACODE:45656

HistoryFeb 27, 2024 - 11:55 a.m.

Out-of-Bounds Read

2024-02-2711:55:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

10

libxpm.so

out-of-bounds read

boundary condition

local user

memory contents

filesystem

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

libxpm.so is vulnerable to Out-of-bounds Read. The vulnerability is due to a boundary condition, allowing a local user to trigger an out of bounds read error and read memory contents from the filesystem.

References

access.redhat.com/errata/RHSA-2024:2146

access.redhat.com/errata/RHSA-2024:2217

access.redhat.com/errata/RHSA-2024:2974

access.redhat.com/errata/RHSA-2024:3022

access.redhat.com/security/cve/CVE-2023-43789

bugzilla.redhat.com/show_bug.cgi?id=2242249

gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/7e21cb63b9a1ca760a06cc4cd9b19bbc3fcd8f51

lists.fedoraproject.org/archives/list/[email protected]/message/63IBRFLQVZSMOAZBZOBKFWJP26ILRAGQ/

lists.fedoraproject.org/archives/list/[email protected]/message/I3KFUQT42R7TB4D7RISNSBQFJGLTQGUL/

lists.fedoraproject.org/archives/list/[email protected]/message/TFAJTBNO3PAIA6EGZR4PN62H6RLKNDTE/

lists.fedoraproject.org/archives/list/[email protected]/message/ZECBCLDYUGLDSVV75ECPIBW7JXOB3747/

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%