PT-2023-6178 · Libxpm+10 · Libxpm+10

Dhananjay Arunesh · Published 2023-10-03 · Updated 2026-04-28 · CVE-2023-43788

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions libXpm (affected versions not specified)

Description The issue is related to a boundary condition within the XpmCreateXpmImageFromBuffer() function of the libXpm library, which can lead to an out-of-bounds read error. This allows a local attacker to read the contents of memory on the system, potentially gaining unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2024:2146

ALSA-2024:2217

ALSA-2024:2974

ALSA-2024:3022

ALT-PU-2023-6106

ALT-PU-2023-6108

ALT-PU-2023-6144

ALT-PU-2023-6469

AZL-31489

BDU:2023-06887

CESA-2024_2974

CESA-2024_3022

CVE-2023-43788

DLA-3603-1

DSA-5516-1

INFSA-2024_2146

INFSA-2024_2217

INFSA-2024_2974

INFSA-2024_3022

JLSEC-2026-286

MGASA-2023-0292

OESA-2023-1710

OPENSUSE-SU-2023_3965-1

OPENSUSE-SU-2024:13297-1

RHSA-2024:2146

RHSA-2024:2217

RHSA-2024:2974

RHSA-2024:3022

RHSA-2024_2146

RHSA-2024_2217

RHSA-2024_2974

RHSA-2024_3022

RLSA-2024:2974

ROSA-SA-2024-2412

SUSE-SU-2023:3962-1

SUSE-SU-2023:3965-1

SUSE-SU-2023_3962-1

SUSE-SU-2023_3965-1

USN-6408-1

USN-6408-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Libxpm

References · 94

• https://access.redhat.com/errata/RHSA-2024:2974 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:2146 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:2974 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-ALPINE-318-CVE-2023-43788 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-2217.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2217.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:3022 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2146 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-31489 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/TFAJTBNO3PAIA6EGZR4PN62H6RLKNDTE · Vendor Advisory
• https://osv.dev/vulnerability/USN-6408-2 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-43788 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-3022.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3603-1 · Vendor Advisory