p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de libxpm

Vulnérabilité publiée pour libxpm au cours des 30 derniers jours : 1. Dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 9

  1. CVE-2026-94287

    Moyenne · CVSS 5.5EPSS 0,13%Correctif disponible

    Denial of service via unsigned underflow in libXpm's write path

    A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

    • Mettez à jour vers 1:3.5.12-1ubuntu0.22.04.4
    Publication Mise à jour
  2. CVE-2026-4367

    Moyenne · CVSS 5.5EPSS 0,13%Correctif disponible

    Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing

    A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file's end, leading to application crashes and Denial of Service conditions.

    • Mettez à jour vers 1:3.5.12-1ubuntu0.22.04.3
    Publication Mise à jour
  3. CVE-2023-43788

    Moyenne · CVSS 5.5EPSS 0,38%Correctif disponible

    Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

    A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

    • Mettez à jour vers 1:3.5.12-1ubuntu0.22.04.2
    Publication Mise à jour
  4. CVE-2023-43787

    Élevée · CVSS 7.8EPSS 0,47%Correctif disponible

    Libx11: integer overflow in xcreateimage() leading to a heap overflow

    A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

    • Mettez à jour vers 1:3.5.12-1ubuntu0.22.04.2
    Publication Mise à jour
  5. CVE-2023-43786

    Moyenne · CVSS 5.5EPSS 0,47%Correctif disponible

    Libx11: stack exhaustion from infinite recursion in putsubimage()

    A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.

    • Mettez à jour vers 1:3.5.12-1ubuntu0.22.04.2
    Publication Mise à jour
  6. CVE-2022-4883

    Élevée · CVSS 8.8EPSS 1,2%Correctif disponible

    CVE-2022-4883

    A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.

    • Mettez à jour vers 1:3.5.12-1ubuntu0.22.04.1
    Publication Mise à jour
  7. CVE-2022-46285

    Élevée · CVSS 7.5EPSS 1,28%Correctif disponible

    CVE-2022-46285

    A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.

    • Mettez à jour vers 1:3.5.12-1ubuntu0.22.04.1
    Publication Mise à jour
  8. CVE-2022-44617

    Élevée · CVSS 7.5EPSS 1,24%Correctif disponible

    CVE-2022-44617

    A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.

    • Mettez à jour vers 1:3.5.12-1ubuntu0.22.04.1
    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →