PT-2023-6218 · Libxpm+10 · Libxpm+10

Dhananjay Arunesh · Published 2023-10-03 · Updated 2026-04-28 · CVE-2023-43789

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions libXpm (affected versions not specified)

Description The issue is related to a boundary condition in libXpm, which can cause an out-of-bounds read error. This can allow a local user to read contents of memory on the system, potentially leading to unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2024:2146

ALSA-2024:2217

ALSA-2024:2974

ALSA-2024:3022

ALT-PU-2023-6469

AZL-31490

BDU:2023-06927

CESA-2024_2974

CESA-2024_3022

CVE-2023-43789

DLA-3603-1

DSA-5516-1

INFSA-2024_2146

INFSA-2024_2217

INFSA-2024_2974

INFSA-2024_3022

JLSEC-2026-287

MGASA-2023-0292

OESA-2023-1710

OPENSUSE-SU-2023_3965-1

OPENSUSE-SU-2024:13297-1

RHSA-2024:2146

RHSA-2024:2217

RHSA-2024:2974

RHSA-2024:3022

RHSA-2024_2146

RHSA-2024_2217

RHSA-2024_2974

RHSA-2024_3022

RLSA-2024:2974

ROSA-SA-2024-2412

SUSE-SU-2023:3962-1

SUSE-SU-2023:3965-1

USN-6408-1

USN-6408-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Libxpm

References · 85

• https://access.redhat.com/errata/RHSA-2024:2974 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2242249 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:2146 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:2974 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-2217.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06927 · Security Note
• https://errata.almalinux.org/9/ALSA-2024-2217.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:3022 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43789 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2023-43789 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-43789 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-31490 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/TFAJTBNO3PAIA6EGZR4PN62H6RLKNDTE · Vendor Advisory