Moderate: libXpm security update
Summary
ALSA-2024:2974: Moderate: libXpm security update. Affects libXpm versions < 3.5.12-11.el8. Fixed in 3.5.12-11.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The libXpm package is a runtime library for X.Org X11, which provides support for the X PixMap (XPM) image format. XPM is a simple and widely used image file format that is commonly used for icons and small graphics in X Window System applications. The libXpm library allows applications to read and manipulate XPM images. It is a critical component for applications that rely on XPM images for their graphical user interface.
Vulnerability Detail
The libXpm package is affected by two security vulnerabilities:
-
CVE-2023-43788: This vulnerability is an out-of-bounds read issue in the XpmCreateXpmImageFromBuffer() function. An attacker could exploit this vulnerability by providing a specially crafted XPM image file, leading to a read access violation and potential information disclosure.
-
CVE-2023-43789: This vulnerability is an out-of-bounds read issue when processing XPM images with corrupted colormaps. An attacker could exploit this vulnerability by providing a malicious XPM image file with a manipulated colormap, leading to a read access violation and potential information disclosure.
These vulnerabilities have a moderate severity rating and could potentially be exploited by an attacker to leak sensitive information from the affected system.
How To Fix
Minimum fixed version
3.5.12-11.el8
This is the first release that contains the fix.
sudo dnf update libXpmTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities at this time.
Conclusion
The libXpm package is affected by two moderate severity vulnerabilities that could potentially lead to information disclosure. It is recommended to update the libXpm package to the latest version to mitigate these vulnerabilities. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libXpm →
FAQ
libXpm is a runtime library for X.Org X11 that provides support for the X PixMap (XPM) image format.
These vulnerabilities could potentially be exploited by an attacker to leak sensitive information from the affected system.
To fix these vulnerabilities, it is recommended to update the libXpm package to version 3.5.12-11.el8 or later.
There are no known workarounds for these vulnerabilities at this time.
You can find more information about these vulnerabilities in the CVE pages listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for libXpm.
