p PatchFirst

CVE-2022-4883

CVE-2022-4883

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.

CVSS 8.8 · High · EPSS 1.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • libxpm

    Versions
    • 3.5.15: Affected

    No fix published

  • libxpm Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1.1

    Update to 1:3.5.12-1.1

  • libxpm Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1.1

    Update to 1:3.5.12-1.1

  • libxpm Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1.1

    Update to 1:3.5.12-1.1

  • libxpm Ubuntu:Pro:14.04:LTS

    Versions
    • 1:3.5.10-1
    • 1:3.5.10-1ubuntu0.1
    • 1:3.5.10-1ubuntu0.1+esm1
    • 1:3.5.10-1ubuntu0.1+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:14.04:LTS

    Versions
    • 2.3.4-4
    • 2.3.4-5
    • 2.3.4-5ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:Pro:16.04:LTS

    Versions
    • 1:3.5.11-1
    • 1:3.5.11-1ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.11-1ubuntu0.16.04.1+esm1

    Update to 1:3.5.11-1ubuntu0.16.04.1+esm1

  • motif Ubuntu:16.04:LTS

    Versions
    • 2.3.4-8ubuntu1
    • 2.3.4-9
    • 2.3.4-10
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:18.04:LTS

    Versions
    • 1:3.5.12-1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.18.04.2

    Update to 1:3.5.12-1ubuntu0.18.04.2

  • motif Ubuntu:18.04:LTS

    Versions
    • 2.3.7-2
    • 2.3.8-1
    • 2.3.8-2
    • 2.3.8-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:20.04:LTS

    Versions
    • 1:3.5.12-1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.20.04.1

    Update to 1:3.5.12-1ubuntu0.20.04.1

  • motif Ubuntu:20.04:LTS

    Versions
    • 2.3.8-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:22.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1build1
    • 1:3.5.12-1build2
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.22.04.1

    Update to 1:3.5.12-1ubuntu0.22.04.1

  • motif Ubuntu:22.04:LTS

    Versions
    • 2.3.8-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:24.04:LTS

    Versions
    • 2.3.8-3
    • 2.3.8-3.1
    • 2.3.8-3.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:25.10

    Versions
    • 2.3.8-4
    • 2.3.8-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:26.10

    Versions
    • 2.3.8-5build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:26.04:LTS

    Versions
    • 2.3.8-5
    • 2.3.8-5build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →