Summary
Martin Ettl discovered that libXpm incorrectly handled certain XPM files.
If a user or automated system were tricked into opening a specially crafted
XPM file, a remote attacker could possibly use this issue to cause libXpm
to stop responding, resulting in a denial of service. (CVE-2022-44617)
Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files.
If a user or automated system were tricked into opening a specially crafted
XPM file, a remote attacker could possibly use this issue to cause libXpm
to stop responding, resulting in a denial of service. (CVE-2022-46285)
Alan Coopersmith discovered that libXpm incorrectly handled calling
external helper binaries. If libXpm was being used by a setuid binary, a
local attacker could possibly use this issue to escalate privileges.
(CVE-2022-4883)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libxpm | 1:3.5.12-1ubuntu0.18.04.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | libxpm | 1:3.5.12-1ubuntu0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | libxpm | 1:3.5.12-1ubuntu0.22.04.1 |
Vulnerabilities 3
-
High 8.8
A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to com…
-
High 7.5
A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will …
-
High 7.5
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition …