PT-2016-4580 · X.Org Foundation+5 · Libxpm+5
Tobias Stoeckmann
·
Published
2016-12-31
·
Updated
2023-10-24
·
CVE-2016-10164
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libXpm versions prior to 3.5.12
Description
The issue is related to multiple integer overflows that occur when a program requests parsing XPM extensions on a 64-bit platform. This can be triggered by a crafted XPM file, specifically through the number of extensions or their concatenated length, leading to a heap-based buffer overflow. As a result, remote attackers can cause a denial of service (out-of-bounds write) or potentially execute arbitrary code.
Recommendations
For libXpm versions prior to 3.5.12, update to version 3.5.12 or later to resolve the issue. As a temporary workaround, consider restricting the parsing of XPM extensions on 64-bit platforms until the update is applied.
Fix
DoS
Buffer Overflow
Integer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Red Hat
Suse
Ubuntu
Libxpm