PT-2023-6218 · Libxpm+10 · Libxpm+10

Dhananjay Arunesh · Publicado 2023-10-03 · Atualizado 2026-04-28 · CVE-2023-43789

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions libXpm (affected versions not specified)

Description The issue is related to a boundary condition in libXpm, which can cause an out-of-bounds read error. This can allow a local user to read contents of memory on the system, potentially leading to unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALSA-2024:2146

ALSA-2024:2217

ALSA-2024:2974

ALSA-2024:3022

ALT-PU-2023-6469

AZL-31490

BDU:2023-06927

CESA-2024_2974

CESA-2024_3022

CVE-2023-43789

DLA-3603-1

DSA-5516-1

INFSA-2024_2146

INFSA-2024_2217

INFSA-2024_2974

INFSA-2024_3022

JLSEC-2026-287

MGASA-2023-0292

OESA-2023-1710

OPENSUSE-SU-2023_3965-1

OPENSUSE-SU-2024:13297-1

RHSA-2024:2146

RHSA-2024:2217

RHSA-2024:2974

RHSA-2024:3022

RHSA-2024_2146

RHSA-2024_2217

RHSA-2024_2974

RHSA-2024_3022

RLSA-2024:2974

ROSA-SA-2024-2412

SUSE-SU-2023:3962-1

SUSE-SU-2023:3965-1

USN-6408-1

USN-6408-2

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Libxpm

Referências · 85

• https://access.redhat.com/errata/RHSA-2024:2974 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=2242249 · Aviso do Fabricante
• https://errata.rockylinux.org/RLSA-2024:2146 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALSA-2024:2974 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2024-2217.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-06927 · Nota de Segurança
• https://errata.almalinux.org/9/ALSA-2024-2217.html · Aviso do Fabricante
• https://t.me/cibsecurity/72168 · Publicação no Telegram
• https://access.redhat.com/security/cve/CVE-2023-43788 · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-libxpm-cve-2023-43789 · Nota
• https://bugzilla.redhat.com/2242248 · Nota
• https://errata.rockylinux.org/RLSA-2024:3022 · Aviso do Fabricante
• https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/7e21cb63b9a1ca760a06cc4cd9b19bbc3fcd8f51 · Nota
• https://access.redhat.com/errata/RHSA-2024:2146 · Aviso do Fabricante