Denial of Service Vulnerability in libXpm Affects Desktop Applications
CVE-2022-46285

7.5HIGH

Key Information:

Vendor

X.org

Status
Libxpm
Vendor
CVE Published:
7 February 2023

What is CVE-2022-46285?

A vulnerability has been identified in libXpm that allows for a denial of service when a comment in a file being parsed is not properly closed. This flaw prevents the detection of an end-of-file condition, leading to an infinite loop that can cause applications linked to the library to become unresponsive. Affected users should apply the relevant patches to mitigate the risk associated with this issue.

Affected Version(s)

libXpm 3.5.15

References

https://bugzilla.redhat.com/show_bug.cgi?id=2160092
https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_re...
https://lists.x.org/archives/xorg-announce/2023-January/0...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.