https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T09:20:08.595654+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-4883 CVE-2022-4883 2026-10-05T09:20:09.769367+00:00

Affected: libXpm

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.

 https://vulnerability.circl.lu/vuln/usn-5807-1 USN-5807-1 — libxpm vulnerabilities 2026-10-05T09:20:09.769542+00:00

Affected: Ubuntu:18.04:LTS: libxpm, Ubuntu:20.04:LTS: libxpm, Ubuntu:22.04:LTS: libxpm

Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. (CVE-2022-44617)

Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. (CVE-2022-46285)

Alan Coopersmith discovered that libXpm incorrectly handled calling external helper binaries. If libXpm was being used by a setuid binary, a local attacker could possibly use this issue to escalate privileges. (CVE-2022-4883)