10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.088 Low
EPSS
Percentile
94.6%
libXpm is a pixmap manipulation library for the X Window System, included in both X.Org and XFree86.
Several issues were discovered in libXpm, including integer overflows, out-of-bounds memory accesses, insecure path traversal and an endless loop.
An attacker could craft a malicious pixmap file and entice a user to use it with an application linked against libXpm. This could lead to Denial of Service or arbitrary code execution.
There is no known workaround at this time.
All X.Org users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-x11-6.7.0-r3"
All XFree86 users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xfree-x11-4.3.0-r8"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | x11-base/xorg-x11 | < 6.8.0-r3 | UNKNOWN |
Gentoo | any | all | x11-base/xfree | < 4.3.0-r8 | UNKNOWN |