VDB

CISA-2022-44617

CISA-2022-44617 PUBLISHED CVSS 7.5 HIGH

Reported by redhat · Published February 6, 2023

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
n/alibXpm3.5.15
n/alibXpm3.5.15, 3.5.15

Timeline

  • Feb 6, 2023 CVE Published
  • Mar 25, 2025 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›