scan.c for LibXPM may allow attackers to execute arbitrary code via a negative…
Priority MEDIUM 40Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
Why it matters now
EPSS 0.04507 91st percentileScored 2026-11-07
Fix Fixed Red Hat: 7 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 82
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:lesstif:lesstif:0.93.94:*:*:*:*:*:*:* | 0.93.94 | Vulnerable | Lesstif |
| cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Sgi |
| cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:* | 6.7.0 | Vulnerable | x.org |
| cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:* | 6.8 | Vulnerable | x.org |
| cpe:2.3:a:x.org:x11r6:6.8.1:*:*:*:*:*:*:* | 6.8.1 | Vulnerable | x.org |
| cpe:2.3:a:xfree86_project:x11r6:3.3:*:*:*:*:*:*:* | 3.3 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:3.3.2:*:*:*:*:*:*:* | 3.3.2 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:* | 3.3.3 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:3.3.4:*:*:*:*:*:*:* | 3.3.4 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:* | 3.3.5 | Vulnerable | Xfree86 Project |
- cpe:2.3:a:lesstif:lesstif:0.93.94:*:*:*:*:*:*:* Versions 0.93.94 Vulnerable ·Lesstif
- cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Sgi
- cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:* Versions 6.7.0 Vulnerable ·x.org
- cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:* Versions 6.8 Vulnerable ·x.org
- cpe:2.3:a:x.org:x11r6:6.8.1:*:*:*:*:*:*:* Versions 6.8.1 Vulnerable ·x.org
- cpe:2.3:a:xfree86_project:x11r6:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·Xfree86 Project
Show 72 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:* | 3.3.6 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.0.2.11:*:*:*:*:*:*:* | 4.0.2.11 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:* | 4.0.3 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:* | 4.1.0 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:* | 4.1.11 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:* | 4.1.12 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:* | 4.2.0 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:* | 4.2.1 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:* | 4.2.1 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:* | 4.3.0 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.3.0.1:*:*:*:*:*:*:* | 4.3.0.1 | Vulnerable | Xfree86 Project |
| cpe:2.3:a:xfree86_project:x11r6:4.3.0.2:*:*:*:*:*:*:* | 4.3.0.2 | Vulnerable | Xfree86 Project |
| cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:* | 2.3 | Vulnerable | Altlinux |
| cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:* | 2.3 | Vulnerable | Altlinux |
| cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:* | 10.0 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:* | 10.1 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:* | 10.1 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:* | 10.2 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86_64:*:*:*:*:* | 10.2 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:* | 2.1 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:* | 3.0 | Vulnerable | Mandrakesoft |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:* | core_2.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:* | core_3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:* | 6.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:* | 6.1 alpha | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:* | 6.2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:* | 6.3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:* | 6.3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:* | 6.3 alpha | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:* | 6.4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:* | 6.4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:* | 6.4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:* | 6.4 alpha | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:* | 7.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:* | 7.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:* | 7.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:* | 7.0 alpha | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:* | 7.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:* | 7.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:* | 7.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:* | 7.1 alpha | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:* | 7.2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:* | 7.3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:* | 7.3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:* | 7.3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:* | 8.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:* | 8.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:* | 8.2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:* | 9.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:* | 9.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:* | 9.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:* | 9.2 | Vulnerable | SUSE |
- cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.0.2.11:*:*:*:*:*:*:* Versions 4.0.2.11 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:* Versions 4.1.11 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:* Versions 4.1.12 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:* Versions 4.2.1 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.3.0.1:*:*:*:*:*:*:* Versions 4.3.0.1 Vulnerable ·Xfree86 Project
- cpe:2.3:a:xfree86_project:x11r6:4.3.0.2:*:*:*:*:*:*:* Versions 4.3.0.2 Vulnerable ·Xfree86 Project
- cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:* Versions 2.3 Vulnerable ·Altlinux
- cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:* Versions 2.3 Vulnerable ·Altlinux
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:* Versions 10.0 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:* Versions 10.2 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86_64:*:*:*:*:* Versions 10.2 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:* Versions 2.1 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:* Versions 3.0 Vulnerable ·Mandrakesoft
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:* Versions core_2.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:* Versions core_3.0 Vulnerable ·Red Hat
- cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:* Versions 6.1 alpha Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:* Versions 6.3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:* Versions 6.3 alpha Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:* Versions 6.4 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:* Versions 6.4 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:* Versions 6.4 alpha Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:* Versions 7.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:* Versions 7.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:* Versions 7.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:* Versions 7.0 alpha Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:* Versions 7.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:* Versions 7.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:* Versions 7.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:* Versions 7.1 alpha Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:* Versions 7.2 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:* Versions 7.3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:* Versions 7.3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:* Versions 7.3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:* Versions 8.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:* Versions 9.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:* Versions 9.2 Vulnerable ·SUSE
Remediation
Red Hat 7 advisories
- RHSA-2008:0524 Released 2008-06-30 · Red Hat rating LowRed Hat Network Satellite Server security update
- Red Hat Satellite v 4.2 (RHEL v.3 AS) jabberd-2.0s10-3.37.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el3.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el3.i386 +8
- Red Hat Satellite v 4.2 (RHEL v.4 AS) jabberd-2.0s10-3.38.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el4.i386 +8
- RHSA-2008:0261 Released 2008-05-20 · Red Hat rating ModerateRed Hat Network Satellite Server security update
- Red Hat Satellite 5.0 (RHEL v.4 AS) jabberd-2.0s10-3.38.rhn.i386, java-1.4.2-ibm-1.4.2.10-1jpp.2.el4.i386, java-1.4.2-ibm-devel-1.4.2.10-1jpp.2.el4.i386 +8
- RHSA-2005:198 Released 2005-06-08 · Red Hat rating Moderatexorg-x11 security update
- Red Hat Enterprise Linux AS version 4 fonts-xorg-100dpi-6.8.1.1-1.EL.1, fonts-xorg-6.8.1.1-1.EL.1, fonts-xorg-75dpi-6.8.1.1-1.EL.1 +47
- Red Hat Enterprise Linux Desktop version 4 fonts-xorg-100dpi-6.8.1.1-1.EL.1, fonts-xorg-6.8.1.1-1.EL.1, fonts-xorg-75dpi-6.8.1.1-1.EL.1 +47
- Red Hat Enterprise Linux ES version 4 fonts-xorg-100dpi-6.8.1.1-1.EL.1, fonts-xorg-6.8.1.1-1.EL.1, fonts-xorg-75dpi-6.8.1.1-1.EL.1 +47
- Red Hat Enterprise Linux WS version 4 fonts-xorg-100dpi-6.8.1.1-1.EL.1, fonts-xorg-6.8.1.1-1.EL.1, fonts-xorg-75dpi-6.8.1.1-1.EL.1 +47
Show 4 more Red Hat advisories
- RHSA-2005:473 Released 2005-05-24 · Red Hat rating Moderatelesstif security update
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1
- Red Hat Enterprise Linux ES version 2.1
- Red Hat Enterprise Linux WS version 2.1
- Red Hat Linux Advanced Workstation 2.1
- RHSA-2005:412 Released 2005-05-11 · Red Hat rating Moderateopenmotif security update
- Red Hat Desktop version 3 openmotif-2.2.3-5.RHEL3.2, openmotif-2.2.3-5.RHEL3.2.i386, openmotif-devel-2.2.3-5.RHEL3.2 +3
- Red Hat Enterprise Linux AS version 3 openmotif-2.2.3-5.RHEL3.2, openmotif-2.2.3-5.RHEL3.2.i386, openmotif-2.2.3-5.RHEL3.2.ia64 +8
- Red Hat Enterprise Linux AS version 4 openmotif-2.2.3-9.RHEL4.1, openmotif-2.2.3-9.RHEL4.1.i386, openmotif-2.2.3-9.RHEL4.1.ia64 +8
- Red Hat Enterprise Linux Desktop version 4 openmotif-2.2.3-9.RHEL4.1, openmotif-2.2.3-9.RHEL4.1.i386, openmotif-devel-2.2.3-9.RHEL4.1 +3
- Red Hat Enterprise Linux ES version 3 openmotif-2.2.3-5.RHEL3.2, openmotif-2.2.3-5.RHEL3.2.i386, openmotif-2.2.3-5.RHEL3.2.ia64 +6
- Red Hat Enterprise Linux ES version 4 openmotif-2.2.3-9.RHEL4.1, openmotif-2.2.3-9.RHEL4.1.i386, openmotif-2.2.3-9.RHEL4.1.ia64 +6
- Red Hat Enterprise Linux WS version 3 openmotif-2.2.3-5.RHEL3.2, openmotif-2.2.3-5.RHEL3.2.i386, openmotif-2.2.3-5.RHEL3.2.ia64 +6
- Red Hat Enterprise Linux WS version 4 openmotif-2.2.3-9.RHEL4.1, openmotif-2.2.3-9.RHEL4.1.i386, openmotif-2.2.3-9.RHEL4.1.ia64 +6
- RHSA-2005:044 Released 2005-04-06 · Red Hat rating ModerateXFree86 security update
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1
- Red Hat Enterprise Linux ES version 2.1
- Red Hat Enterprise Linux WS version 2.1
- Red Hat Linux Advanced Workstation 2.1
- RHSA-2005:331 Released 2005-03-30 · Red Hat rating ModerateXFree86 security update
- Red Hat Desktop version 3 XFree86-100dpi-fonts-4.3.0-81.EL, XFree86-100dpi-fonts-4.3.0-81.EL.i386, XFree86-4.3.0-81.EL +47
- Red Hat Enterprise Linux AS version 3 XFree86-100dpi-fonts-4.3.0-81.EL, XFree86-100dpi-fonts-4.3.0-81.EL.i386, XFree86-100dpi-fonts-4.3.0-81.EL.ia64 +47
- Red Hat Enterprise Linux ES version 3 XFree86-100dpi-fonts-4.3.0-81.EL, XFree86-100dpi-fonts-4.3.0-81.EL.i386, XFree86-100dpi-fonts-4.3.0-81.EL.ia64 +47
- Red Hat Enterprise Linux WS version 3 XFree86-100dpi-fonts-4.3.0-81.EL, XFree86-100dpi-fonts-4.3.0-81.EL.i386, XFree86-100dpi-fonts-4.3.0-81.EL.ia64 +47
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2005:331, RHSA-2005:412 |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | Fixed | RHSA-2005:044 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2005:331, RHSA-2005:412 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2005:198, RHSA-2005:412 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2005:198, RHSA-2005:412 |
| Red Hat Enterprise Linux ES version 2.1 | Fixed | RHSA-2005:044 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2005:331, RHSA-2005:412 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2005:198, RHSA-2005:412 |
| Red Hat Enterprise Linux WS version 2.1 | Fixed | RHSA-2005:044 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2005:331, RHSA-2005:412 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2005:198, RHSA-2005:412 |
| Red Hat Linux Advanced Workstation 2.1 | Fixed | RHSA-2005:044 |
| Red Hat Satellite 5.0 (RHEL v.4 AS) | Fixed | RHSA-2008:0261 |
| Red Hat Satellite v 4.2 (RHEL v.3 AS) | Fixed | RHSA-2008:0524 |
| Red Hat Satellite v 4.2 (RHEL v.4 AS) | Fixed | RHSA-2008:0524 |
Timeline
- 2026-10-02 Threatist record created from CVE-2005-0605
- 2026-10-03 Alias added: GHSA-fcqj-f8qj-8gcp
References
Patch 6
Advisory 11
Sources
- CVE-2005-0605 · CVE Program
- CVE-2005-0605 · NVD
- FIRST EPSS
- GHSA-fcqj-f8qj-8gcp · GitHub Advisory Database · CC BY 4.0
- CVE-2005-0605 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences