Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-43789

Libxpm: out of bounds read on xpm with corrupted colormap

Description

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libXpm

Default version status: unaffected

  • 0 to < 3.5.17affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:3.5.12-11.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.3.4-20.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.5.13-10.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.3.4-28.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

References