PT-2023-1172 · Libxpm+10 · Libxpm+10
Martin Ettl
·
Publicado
2023-01-17
·
Atualizado
2025-03-25
·
CVE-2022-44617
CVSS v3.1
8.1
Alta
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libXpm (affected versions not specified)
Description
A flaw was found in libXpm. When processing a file with a width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library. The vulnerability is related to insufficient input validation in the
ParsePixels() function. This can be exploited by a remote attacker using a specially crafted XPM file with a width set to 0, leading to a Denial of Service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
RCE
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libxpm