Every CVE Search/ Get API key

CVE-2023-43788

Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

5.5 MediumFix available

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.38%Up 0.3 points since Oct 11, 2023
90%50%10%1%

What each source reports

CVE List Score used 5.5

Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
CVE-2023-43788
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-125
Updated
2026-11-07
EUVDEUVD-2023-48165 5.5

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
EUVD-2023-48165
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-07
GitHub AdvisoriesGHSA-vg9m-f99j-3qwm 5.5

A vulnerability was found in libXpm due to a boundary condition within the...

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
GHSA-vg9m-f99j-3qwm
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-125
Updated
2026-11-02
NVD 5.5

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
CVE-2023-43788
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-125
Updated
2026-11-07
OSVALPINE-CVE-2023-43788 5.5

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
ALPINE-CVE-2023-43788
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVAZL-31489 5.5

CVE-2023-43788 affecting package libXpm for versions less than 3.5.17-1

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
AZL-31489
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 27 moreShow less
OSVBELL-CVE-2023-43788 5.5
Record
BELL-CVE-2023-43788
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSV 5.5

Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
CVE-2023-43788
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-125
Updated
2026-11-02
OSVDEBIAN-CVE-2023-43788 5.5

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
DEBIAN-CVE-2023-43788
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-07
OSVJLSEC-2026-286 5.5

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
JLSEC-2026-286
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2023-1710 6.1

libXpm security update

X.Org X11 libXpm runtime library

Security Fix(es):

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local to trigger an out-of-bounds read error and read the contents of memory on the system.(CVE-2023-43788)

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system.(CVE-2023-43789)

Record
OESA-2023-1710
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2146 5.5

Red Hat Security Advisory: libXpm security update

Record
RHSA-2024:2146
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:2217 5.5

Red Hat Security Advisory: motif security update

Record
RHSA-2024:2217
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:2974 5.5

Red Hat Security Advisory: libXpm security update

Record
RHSA-2024:2974
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:3022 5.5

Red Hat Security Advisory: motif security update

Record
RHSA-2024:3022
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2024:2146 5.5

Moderate: libXpm security update

X.Org X11 libXpm runtime library.

Security Fix(es):

  • libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)

  • libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.

Record
RLSA-2024:2146
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2024:2217 5.5

Moderate: motif security update

The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager.

Security Fix(es):

  • libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)

  • libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.

Record
RLSA-2024:2217
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2024:3022 5.5

Moderate: motif security update

The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager.

Security Fix(es):

  • libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)

  • libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Record
RLSA-2024:3022
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVROOT-OS-ALPINE-318-CVE-2023-43788 5.5

CVE-2023-43788 in libxpm - Patched by Root

Root has patched CVE-2023-43788 in the libxpm package for Root:Alpine:3.18. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-318-CVE-2023-43788
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2023-43788 5.5

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Record
UBUNTU-CVE-2023-43788
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2024:2146 No score

Moderate: libXpm security update

X.Org X11 libXpm runtime library.

Security Fix(es):

  • libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
  • libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2146
Updated
2026-11-02
OSVALSA-2024:2217 No score

Moderate: motif security update

The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager.

Security Fix(es):

  • libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
  • libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2217
Updated
2026-11-02
OSVALSA-2024:2974 No score

Moderate: libXpm security update

X.Org X11 libXpm runtime library.

Security Fix(es):

  • libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
  • libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2974
Updated
2026-11-02
OSVALSA-2024:3022 No score

Moderate: motif security update

The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager.

Security Fix(es):

  • libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
  • libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:3022
Updated
2026-11-02
OSVCLSA-2026-1778167813 No score

libXpm: Fix of 2 CVEs

  • CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  • CVE-2023-43789: out of bounds read on XPM with corrupted colormap
Record
CLSA-2026-1778167813
Updated
2026-11-02
OSVCLSA-2026-1779823076 No score

motif: Fix of 2 CVEs

  • CVE-2023-43788: fix out of bounds read in XpmCreateXpmImageFromBuffer
  • CVE-2023-43789: fix out of bounds read on XPM with corrupted colormap
Record
CLSA-2026-1779823076
Updated
2026-11-02
OSVMGASA-2023-0292 No score

Updated libxpm packages fix security vulnerabilities

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local to trigger an out-of-bounds read error and read the contents of memory on the system. (CVE-2023-43788)

Out of bounds read on XPM with corrupted colormap. (CVE-2023-43789)

Record
MGASA-2023-0292
Updated
2026-11-02
OSVopenSUSE-SU-2024:13297-1 No score

libXpm-devel-3.5.17-1.1 on GA media

These are all security issues fixed in the libXpm-devel-3.5.17-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13297-1
Updated
2026-11-02
OSVRLSA-2024:2974 No score

Moderate: libXpm security update

X.Org X11 libXpm runtime library.

Security Fix(es):

  • libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)

  • libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Record
RLSA-2024:2974
Updated
2026-11-02
OSVSUSE-SU-2023:3962-1 No score

Security update for libXpm

This update for libXpm fixes the following issues:

  • CVE-2023-43788: Fixed an out of bounds read when creating an image (bsc#1215686).
  • CVE-2023-43789: Fixed an out of bounds read when parsing an XPM file with a corrupted colormap (bsc#1215687).
Record
SUSE-SU-2023:3962-1
Updated
2026-11-02
OSVSUSE-SU-2023:3965-1 No score

Security update for libXpm

This update for libXpm fixes the following issues:

  • CVE-2023-43788: Fixed an out of bounds read when creating an image (bsc#1215686).
  • CVE-2023-43789: Fixed an out of bounds read when parsing an XPM file with a corrupted colormap (bsc#1215687).
Record
SUSE-SU-2023:3965-1
Updated
2026-11-02
OSVUSN-6408-1 No score

libxpm vulnerabilities

Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to consume memory, leading to a denial of service. (CVE-2023-43786)

Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could use this issue to cause libXpm to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2023-43787)

Alan Coopersmith discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to cause libXpm to crash, leading to a denial of service. (CVE-2023-43788, CVE-2023-43789)

Record
USN-6408-1
Updated
2026-11-02
OSVUSN-6408-2 No score

libxpm vulnerabilities

USN-6408-1 fixed several vulnerabilities in libXpm. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to consume memory, leading to a denial of service. (CVE-2023-43786)

Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could use this issue to cause libXpm to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2023-43787)

Alan Coopersmith discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to cause libXpm to crash, leading to a denial of service. (CVE-2023-43788, CVE-2023-43789)

Record
USN-6408-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxpm
Alpine:v3.19
 before 3.5.17-r0
3.5.17-r0
libxpm
Alpine:v3.20
 before 3.5.17-r0
3.5.17-r0
libxpm
Alpine:v3.21
 before 3.5.17-r0
3.5.17-r0
libxpm
Alpine:v3.22
 before 3.5.17-r0
3.5.17-r0
libxpm
Alpine:v3.23
 before 3.5.17-r0
3.5.17-r0
libxpm
Alpine:v3.24
 before 3.5.17-r0
3.5.17-r0
libXpm
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.5.13-10.el9
3.5.13-10.el9
libXpm-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.5.13-10.el9
3.5.13-10.el9
motif
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.3.4-28.el9
2.3.4-28.el9
motif-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.3.4-28.el9
2.3.4-28.el9
Show 89 moreShow less
Affected packages
PackageAffectedFixed
libXpm
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.5.12-11.el8
3.5.12-11.el8
libXpm-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.5.12-11.el8
3.5.12-11.el8
motif
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.3.4-20.el8
2.3.4-20.el8
motif-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.3.4-20.el8
2.3.4-20.el8
motif-static
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.3.4-20.el8
2.3.4-20.el8
libXpm
Azure Linux:2
 before 3.5.17-1
3.5.17-1
libxpm
Alpaquita:23
 3.5.14-r0 up to 3.5.17-r0
3.5.17-r0
libxpm
Alpaquita:stream
 3.5.14-r0 up to 3.5.17-r0
3.5.17-r0
libxpm
BellSoft Hardened Containers:23
 3.5.14-r0 up to 3.5.17-r0
3.5.17-r0
libxpm
BellSoft Hardened Containers:stream
 3.5.14-r0 up to 3.5.17-r0
3.5.17-r0
libXpm
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.5.13-8.el9_1.tuxcare.els1
3.5.13-8.el9_1.tuxcare.els1
libXpm-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.5.13-8.el9_1.tuxcare.els1
3.5.13-8.el9_1.tuxcare.els1
motif
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.3.4-27.el9_2.tuxcare.els1
2.3.4-27.el9_2.tuxcare.els1
motif-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.3.4-27.el9_2.tuxcare.els1
2.3.4-27.el9_2.tuxcare.els1
motif-static
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.3.4-27.el9_2.tuxcare.els1
2.3.4-27.el9_2.tuxcare.els1
libxpm
Debian:12
 before 1:3.5.12-1.1+deb12u1, plus listed versions
1:3.5.12-1.1
1:3.5.12-1.1+deb12u1
libxpm
Debian:13
 before 1:3.5.17-1
1:3.5.17-1
libxpm
Debian:14
 before 1:3.5.17-1
1:3.5.17-1
libxpm
Debian:10
From an advisory covering 2 CVEs
 before 1:3.5.12-1+deb10u2, plus listed versions
1:3.5.12-11:3.5.12-1+deb10u1
1:3.5.12-1+deb10u2
libxpm
Debian:11
From an advisory covering 2 CVEs
 before 1:3.5.12-1.1+deb11u1, plus listed versions
1:3.5.12-11:3.5.12-1.11:3.5.12-1.1~deb11u1
1:3.5.12-1.1+deb11u1
libxpm
Debian:12
From an advisory covering 2 CVEs
 before 1:3.5.12-1.1+deb12u1, plus listed versions
1:3.5.12-1.1
1:3.5.12-1.1+deb12u1
Xorg_libXpm_jll
Julia
 before 3.5.17+0
3.5.17+0
libxpm
Mageia:8
From an advisory covering 2 CVEs
 before 3.5.15-1.1.mga8
3.5.15-1.1.mga8
libxpm
Mageia:9
From an advisory covering 2 CVEs
 before 3.5.15-1.1.mga9
3.5.15-1.1.mga9
libXpm
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.5.13-3.oe1
3.5.13-3.oe1
libXpm
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 3.5.13-3.oe1
3.5.13-3.oe1
libXpm
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 3.5.13-5.oe2203sp2
3.5.13-5.oe2203sp2
libXpm
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.5.13-5.oe2203sp1
3.5.13-5.oe2203sp1
libXpm
openEuler:22.03-LTS-SP2
From an advisory covering 2 CVEs
 before 3.5.13-5.oe2203sp2
3.5.13-5.oe2203sp2
libXpm
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.5.13-10.el9
0:3.5.13-10.el9
libXpm-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.5.13-10.el9
0:3.5.13-10.el9
libXpm-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.5.13-10.el9
0:3.5.13-10.el9
libXpm-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.5.13-10.el9
0:3.5.13-10.el9
libXpm-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.5.13-10.el9
0:3.5.13-10.el9
motif
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-28.el9
0:2.3.4-28.el9
motif-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-28.el9
0:2.3.4-28.el9
motif-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-28.el9
0:2.3.4-28.el9
motif-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-28.el9
0:2.3.4-28.el9
motif-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-28.el9
0:2.3.4-28.el9
libXpm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.5.12-11.el8
0:3.5.12-11.el8
libXpm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.5.12-11.el8
0:3.5.12-11.el8
libXpm-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.5.12-11.el8
0:3.5.12-11.el8
libXpm-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.5.12-11.el8
0:3.5.12-11.el8
libXpm-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.5.12-11.el8
0:3.5.12-11.el8
motif
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-20.el8
0:2.3.4-20.el8
motif-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-20.el8
0:2.3.4-20.el8
motif-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-20.el8
0:2.3.4-20.el8
motif-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-20.el8
0:2.3.4-20.el8
motif-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-20.el8
0:2.3.4-20.el8
motif-static
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.3.4-20.el8
0:2.3.4-20.el8
libXpm
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.5.13-10.el9
0:3.5.13-10.el9
motif
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.3.4-28.el9
0:2.3.4-28.el9
libXpm
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.5.12-11.el8
0:3.5.12-11.el8
motif
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.3.4-20.el8
0:2.3.4-20.el8
libxpm
Root:Alpine:3.18
 before 3.5.16-r10071
3.5.16-r100713.5.16-r100743.5.16-r100723.5.16-r100733.5.16-r10075
rootio-libxpm
Root:Alpine:3.18
 before 3.5.16-r10071
3.5.16-r100713.5.16-r100743.5.16-r100723.5.16-r100733.5.16-r10075
libXpm
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 3.5.11-6.10.1
3.5.11-6.10.1
libXpm
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 3.5.11-6.10.1
3.5.11-6.10.1
libXpm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 3.5.11-6.10.1
3.5.11-6.10.1
libXpm
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
SUSE:Manager Proxy 4.2
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
SUSE:Manager Server 4.2
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libXpm
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 3.5.12-150000.3.10.1
3.5.12-150000.3.10.1
libxpm
Ubuntu:Pro:14.04:LTS
 before 1:3.5.10-1ubuntu0.1+esm2, plus listed versions
1:3.5.10-11:3.5.10-1ubuntu0.11:3.5.10-1ubuntu0.1+esm1
1:3.5.10-1ubuntu0.1+esm2
motif
Ubuntu:14.04:LTS
 All versions, plus listed versions
2.3.4-42.3.4-52.3.4-5ubuntu0.1
 None known
libxpm
Ubuntu:Pro:16.04:LTS
 before 1:3.5.11-1ubuntu0.16.04.1+esm2, plus listed versions
1:3.5.11-11:3.5.11-1ubuntu0.16.04.11:3.5.11-1ubuntu0.16.04.1+esm1
1:3.5.11-1ubuntu0.16.04.1+esm2
motif
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.3.4-8ubuntu12.3.4-92.3.4-10
 None known
libxpm
Ubuntu:Pro:18.04:LTS
 before 1:3.5.12-1ubuntu0.18.04.2+esm1, plus listed versions
1:3.5.12-11:3.5.12-1ubuntu0.18.04.2
1:3.5.12-1ubuntu0.18.04.2+esm1
motif
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.3.7-22.3.8-12.3.8-22.3.8-2build1
 None known
libxpm
Ubuntu:20.04:LTS
 before 1:3.5.12-1ubuntu0.20.04.2, plus listed versions
1:3.5.12-11:3.5.12-1ubuntu0.20.04.1
1:3.5.12-1ubuntu0.20.04.2
motif
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.3.8-2build1
 None known
libxpm
Ubuntu:22.04:LTS
 before 1:3.5.12-1ubuntu0.22.04.2, plus listed versions
1:3.5.12-11:3.5.12-1build11:3.5.12-1build21:3.5.12-1ubuntu0.22.04.1
1:3.5.12-1ubuntu0.22.04.2
motif
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.3.8-3
 None known
libxpm
Ubuntu:24.04:LTS
 before 1:3.5.12-1.1ubuntu1
1:3.5.12-1.1ubuntu1
motif
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.3.8-32.3.8-3.12.3.8-3.1build1
 None known
motif
Ubuntu:25.10
 All versions, plus listed versions
2.3.8-42.3.8-5
 None known
motif
Ubuntu:26.10
 All versions, plus listed versions
2.3.8-5build1
 None known
motif
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.3.8-52.3.8-5build1
 None known
libxpm
Ubuntu:20.04:LTS
From an advisory covering 4 CVEs
 before 1:3.5.12-1ubuntu0.20.04.2, plus listed versions
1:3.5.12-11:3.5.12-1ubuntu0.20.04.1
1:3.5.12-1ubuntu0.20.04.2
libxpm
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 1:3.5.12-1ubuntu0.22.04.2, plus listed versions
1:3.5.12-11:3.5.12-1build11:3.5.12-1build21:3.5.12-1ubuntu0.22.04.1
1:3.5.12-1ubuntu0.22.04.2
libxpm
Ubuntu:Pro:14.04:LTS
From an advisory covering 4 CVEs
 before 1:3.5.10-1ubuntu0.1+esm2, plus listed versions
1:3.5.10-11:3.5.10-1ubuntu0.11:3.5.10-1ubuntu0.1+esm1
1:3.5.10-1ubuntu0.1+esm2
libxpm
Ubuntu:Pro:16.04:LTS
From an advisory covering 4 CVEs
 before 1:3.5.11-1ubuntu0.16.04.1+esm2, plus listed versions
1:3.5.11-11:3.5.11-1ubuntu0.16.04.11:3.5.11-1ubuntu0.16.04.1+esm1
1:3.5.11-1ubuntu0.16.04.1+esm2
libxpm
Ubuntu:Pro:18.04:LTS
From an advisory covering 4 CVEs
 before 1:3.5.12-1ubuntu0.18.04.2+esm1, plus listed versions
1:3.5.12-11:3.5.12-1ubuntu0.18.04.2
1:3.5.12-1ubuntu0.18.04.2+esm1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-43788 is a medium vulnerability (CVSS 5.5) in X.org Libxpm, published October 3, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in libxpm 3.5.17-r0.

References

Show 54 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open