CVE-2022-44617: Input Validation
A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.
Other sources
When reading XPM images from a file with libXpm 3.5.14 or older, if a image has a width of 0 and a very large height, the ParsePixels() function will loop over the entire height calling getc() and ungetc() repeatedly, or in some circumstances, may loop seemingly forever, which may cause a denial of service to the calling program when given a small crafted XPM file to parse.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-44617?
CVE-2022-44617 is a vulnerability found in libXpm that can result in a Denial of Service (DoS) when processing a file with a width of 0 and a very large height.
What is the severity of CVE-2022-44617?
CVE-2022-44617 has a severity rating of medium.
How can CVE-2022-44617 impact my application?
CVE-2022-44617 can lead to an infinite loop, causing a Denial of Service (DoS) in the application linked to the libXpm library.
How can I fix CVE-2022-44617?
To fix CVE-2022-44617, you should update the libXpm library to version 1:3.5.11-1ubuntu0.16.04.1+ or apply the recommended patches for other affected versions.
Where can I find more information about CVE-2022-44617?
You can find more information about CVE-2022-44617 on the following references: [1] [2] [3].