Red Hat Security Advisory

RHSA-2024:2146

libXpm security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libXpm-3.5.13-10.el9, libXpm-devel-3.5.13-10.el9

Fixes 2 records

TI-2023-23480 CVE-2023-43789 · GHSA-738h-f6r7-jx59

Libxpm: out of bounds read on xpm with corrupted colormap

LOW 25

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00364 Published 2023-10-12 Partial fix · 3.5.17, 3.5.12-11.el8 +3 CWE-125

TI-2023-23479 CVE-2023-43788 · GHSA-vg9m-f99j-3qwm

Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

LOW 25

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0038 Published 2023-10-10 Partial fix · 3.5.17, 3.5.12-11.el8 +3 CWE-125