A flaw was found in libXpm. When processing a file with... · CVE-2022-44617 · GitHub Advisory Database · GitHub

A flaw was found in libXpm. When processing a file with...

High severity Unreviewed Published Feb 7, 2023 to the GitHub Advisory Database • Updated Jun 20, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.

References

Published by the National Vulnerability Database

Feb 6, 2023

Published to the GitHub Advisory Database Feb 7, 2023

Last updated Jun 20, 2023

Severity

High

7.5

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H