https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:20:07 +0000 https://vulnerability.circl.lu/vuln/cve-2022-4883 <p><strong>Affected:</strong> libXpm</p> <p>A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.</p> <p><strong>Affected:</strong> libXpm</p> <p>A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.</p> https://vulnerability.circl.lu/vuln/cve-2022-4883 https://vulnerability.circl.lu/vuln/usn-5807-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libxpm, Ubuntu:20.04:LTS: libxpm, Ubuntu:22.04:LTS: libxpm</p> <p>Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. (CVE-2022-44617)</p> <p>Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. (CVE-2022-46285)</p> <p>Alan Coopersmith discovered that libXpm incorrectly handled calling external helper binaries. If libXpm was being used by a setuid binary, a local attacker could possibly use this issue to escalate privileges. (CVE-2022-4883)</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libxpm, Ubuntu:20.04:LTS: libxpm, Ubuntu:22.04:LTS: libxpm</p> <p>Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. (CVE-2022-44617)</p> <p>Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. (CVE-2022-46285)</p> <p>Alan Coopersmith discovered that libXpm incorrectly handled calling external helper binaries. If libXpm was being used by a setuid binary, a local attacker could possibly use this issue to escalate privileges. (CVE-2022-4883)</p> https://vulnerability.circl.lu/vuln/usn-5807-1