FreeBSD: VID-38F213B6-8F3D-4067-91EF-BF14DE7BA518 (CVE-2022-44617): libXpm -- Issues handling XPM files

FreeBSD: VID-38F213B6-8F3D-4067-91EF-BF14DE7BA518 (CVE-2022-44617): libXpm -- Issues handling XPM files

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

01/17/2023

Created

03/27/2023

Added

03/24/2023

Modified

01/28/2025

Description

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.

Solution(s)

• freebsd-upgrade-package-libxpm

References

• CVE-2022-44617
• USN-5807-1