Oracle Linux: CVE-2023-43788: ELSA-2024-2146: libXpm security update (MODERATE) (Multiple Advisories)

Oracle Linux: CVE-2023-43788: ELSA-2024-2146:libXpm security update (MODERATE) (Multiple Advisories)

Severity

5

CVSS

(AV:L/AC:L/Au:N/C:C/I:N/A:N)

Published

10/04/2023

Created

05/22/2024

Added

05/07/2024

Modified

01/07/2025

Description

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Solution(s)

• oracle-linux-upgrade-libxpm
• oracle-linux-upgrade-libxpm-devel
• oracle-linux-upgrade-motif
• oracle-linux-upgrade-motif-devel
• oracle-linux-upgrade-motif-static

References

• https://attackerkb.com/topics/cve-2023-43788
• CVE - 2023-43788
• ELSA-2024-2146
• ELSA-2024-2974
• ELSA-2024-2217
• ELSA-2024-3022