CVE-2023-43788: Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()
A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.
Other sources
A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local to trigger an out-of-bounds read error and read the contents of memory on the system.
A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libXpmto a version that resolves this vulnerability.Fixed in 3.5.17 - Upgrade
Upgrade
debian/libxpmto a version that resolves this vulnerability.Fixed in 1:3.5.12-1.1+deb12u1 - Upgrade
Upgrade
debian/libxpmto a version that resolves this vulnerability.Fixed in 1:3.5.17-1 - Upgrade
Upgrade
debian/libxpmto a version that resolves this vulnerability.Fixed in 1:3.5.12-1.1+deb12u1Fixed in 1:3.5.17-1+deb13u1Fixed in 1:3.5.20-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43788?
The severity of CVE-2023-43788 is not specified.
How do I fix CVE-2023-43788?
To fix CVE-2023-43788, update the affected software to version 3.5.17 or higher.
What is the source of CVE-2023-43788?
The source of CVE-2023-43788 is libXpm.
Where can I find more information about CVE-2023-43788?
You can find more information about CVE-2023-43788 on the following websites: CVE Mitre (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43788), Ubuntu Security Notices (https://ubuntu.com/security/notices/USN-6408-1), and NVD NIST (https://nvd.nist.gov/vuln/detail/CVE-2023-43788).