Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-46285

Опубликовано: 07 фев. 2023
Источник: debian
EPSS Низкий

Описание

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libxpmfixed1:3.5.12-1.1package
libxpmfixed1:3.5.12-1.1~deb11u1bullseyepackage

Примечания

  • https://www.openwall.com/lists/oss-security/2023/01/17/2

  • https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/a3a7c6dcc3b629d765014816c566c63165c63ca8 (libXpm-3.5.15)

EPSS

Процентиль: 24%
0.00076
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.

CVSS3: 7.5
redhat
больше 2 лет назад

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.

CVSS3: 7.5
nvd
больше 2 лет назад

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.

CVSS3: 7.5
github
больше 2 лет назад

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость функции ParseComment() библиотеки для работы с файлами изображений X Pixmap (XPM) libXpm, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 24%
0.00076
Низкий