CVE-2023-43789Out-of-bounds Read in Project Libxpm

CWE-125Out-of-bounds Read11 documents9 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 89.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 12
Latest updateOct 23

Description

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

NVDlibxpm_project/libxpm< 3.5.17
Debianx.org/libxpm< 1:3.5.12-1.1+deb11u1+3

Also affects: Fedora 38, Enterprise Linux 8.0, 9.0

🔴Vulnerability Details

3
GHSA
GHSA-738h-f6r7-jx59: A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and2023-10-12
CVEList
Libxpm: out of bounds read on xpm with corrupted colormap2023-10-12
OSV
CVE-2023-43789: A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and2023-10-12

📋Vendor Advisories

7
Ubuntu
libXpm vulnerabilities2023-10-23
Microsoft
Libxpm: out of bounds read on xpm with corrupted colormap2023-10-10
Red Hat
libXpm: out of bounds read on XPM with corrupted colormap2023-10-04
Ubuntu
libXpm vulnerabilities2023-10-03
BSD
OpenBSD 7.2 Errata 039: SECURITY FIX2023-10-03
CVE-2023-43789 — Out-of-bounds Read in Project Libxpm | cvebase