{"id":"CVE-2022-46285","aliases":["ALPINE-CVE-2022-46285","ALSA-2023:0379","ALSA-2023:0383","AZL-13249","BELL-CVE-2022-46285","DEBIAN-CVE-2022-46285","DLA-3459-1","EUVD-2022-49103","GHSA-x5vr-48jx-h8wp","JLSEC-2026-284","MGASA-2023-0031","OESA-2023-1078","OESA-2024-2306","RHSA-2023:0378","RHSA-2023:0379","RHSA-2023:0380","RHSA-2023:0381","RHSA-2023:0382","RHSA-2023:0383","RHSA-2023:0384","RLSA-2023:0379","RLSA-2023:0383","SUSE-SU-2023:0165-1","SUSE-SU-2023:0171-1","UBUNTU-CVE-2022-46285","USN-5807-1","USN-5807-2","USN-5807-3","openSUSE-SU-2024:12617-1"],"status":"published","title":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the...","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01284,"percentile":0.70307,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2023-01-17T00:00:00Z","modified":"2026-11-03T07:18:33Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libxpm","fixed_in":["3.5.15-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libXpm","fixed_in":["3.5.17-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxpm","fixed_in":["1:3.5.12-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxpm","fixed_in":["1:3.5.12-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxpm","fixed_in":["1:3.5.12-1.1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Xorg_libXpm_jll","fixed_in":["3.5.17+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxpm","fixed_in":["1:3.5.10-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxpm","fixed_in":["1:3.5.11-1ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libxpm","fixed_in":["1:3.5.12-1ubuntu0.18.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxpm","fixed_in":["1:3.5.12-1ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxpm","fixed_in":["1:3.5.12-1ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-9.el8_7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-9.el8_7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.13-8.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.13-8.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.17-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1+deb10u1"}]}],"versions":["1:3.5.12-1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"Xorg_libXpm_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.5.17+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.15-1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.13-2.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.13-2.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.13-4.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.13-4.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-6.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-4.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-4.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-21.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-4.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libXpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libXpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libXpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libXpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.12-9.el8_7"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.13-8.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.11-6.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.11-6.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.11-6.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.11-6.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.11-6.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.11-6.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.11-6.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.11-6.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libXpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-150000.3.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.10-1ubuntu0.1+esm1"}]}],"versions":["1:3.5.10-1","1:3.5.10-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.4-4","2.3.4-5","2.3.4-5ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.11-1ubuntu0.16.04.1+esm1"}]}],"versions":["1:3.5.11-1","1:3.5.11-1ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.4-8ubuntu1","2.3.4-9","2.3.4-10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.18.04.2"}]}],"versions":["1:3.5.12-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.7-2","2.3.8-1","2.3.8-2","2.3.8-2build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.20.04.1"}]}],"versions":["1:3.5.12-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.22.04.1"}]}],"versions":["1:3.5.12-1","1:3.5.12-1build1","1:3.5.12-1build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-3","2.3.8-3.1","2.3.8-3.1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-4","2.3.8-5"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-5build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"motif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-5","2.3.8-5build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.18.04.2"}]}],"versions":["1:3.5.12-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.20.04.1"}]}],"versions":["1:3.5.12-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.12-1ubuntu0.22.04.1"}]}],"versions":["1:3.5.12-1","1:3.5.12-1build1","1:3.5.12-1build2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.11-1ubuntu0.16.04.1+esm1"}]}],"versions":["1:3.5.11-1","1:3.5.11-1ubuntu0.16.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.10-1ubuntu0.1+esm1"}]}],"versions":["1:3.5.10-1","1:3.5.10-1ubuntu0.1"]}],"products":[{"vendor":"microsoft","product":"libxpm"},{"vendor":"x.org","product":"libxpm"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160092","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report","web"]},{"url":"https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/9","tags":["x_transferred","fix","web"]},{"url":"https://lists.x.org/archives/xorg-announce/2023-January/003312.html","tags":["x_transferred","web","article"]},{"url":"https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/a3a7c6dcc3b629d7650148","tags":["x_transferred","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00021.html","tags":["mailing-list","x_transferred","article","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/1","tags":["mailing-list","x_transferred","article","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/10","tags":["mailing-list","x_transferred","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46285","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-x5vr-48jx-h8wp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-46285","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0379","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-44617","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46285","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4883","tags":["report"]},{"url":"https://bugzilla.redhat.com/2160092","tags":["report"]},{"url":"https://bugzilla.redhat.com/2160193","tags":["report"]},{"url":"https://bugzilla.redhat.com/2160213","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-0379.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0383","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-0383.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-46285","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/46xxx/CVE-2022-46285.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-46285","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0031.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31425","tags":["report"]},{"url":"https://lists.x.org/archives/xorg-announce/2023-January/003313.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5807-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/BJ2J3EVQMPPSES6ILLTGGH5XVLNDMCRP/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44617","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2306","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0378","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160213","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0378.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4883","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-44617","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46285","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0379.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0380","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0380.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0381","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0381.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0382","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0382.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0383.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0384","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0384.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0379","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0383","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230165-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207029","tags":["report"]},{"url":"https://bugzilla.suse.com/1207030","tags":["report"]},{"url":"https://bugzilla.suse.com/1207031","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4883","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230171-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-46285","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5807-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5807-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-4883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-44617","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-46285","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-02-07T00:00:00Z","modified":"2025-03-25T14:43:37.619Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:34:31.840191Z"}],"euvd":[{"id":"EUVD-2022-49103","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-02-07T00:00:00Z","modified":"2025-03-25T14:43:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:53.129601Z"}],"ghsa":[{"id":"GHSA-x5vr-48jx-h8wp","title":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the...","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-02-07T21:30:25Z","modified":"2023-10-04T00:30:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:54:47.501822Z"}],"nvd":[{"id":"CVE-2022-46285","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-02-07T19:15:09.147Z","modified":"2026-06-17T05:11:25.577Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:07:36.026349Z"}],"osv":[{"id":"ALPINE-CVE-2022-46285","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-02-07T19:15:09.147Z","modified":"2026-11-03T07:18:33.775951067Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-13249","title":"CVE-2022-46285 affecting package libXpm for versions less than 3.5.17-1","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-02-07T19:15:09Z","modified":"2026-04-21T04:22:46.753943Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"BELL-CVE-2022-46285","title":"CVE-2022-46285 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:11.428852Z","modified":"2026-09-06T07:15:20.843746536Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-46285","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-02-07T00:00:00Z","modified":"2026-10-28T02:30:58.848298757Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"JLSEC-2026-284","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2026-04-28T13:07:10.945Z","modified":"2026-07-18T00:00:36.360340882Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2023-1078","title":"libXpm security update","description":"X.Org X11 libXpm runtime library\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.(CVE-2022-4883)\r\n\r\nA flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.(CVE-2022-44617)\r\n\r\nA flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.(CVE-2022-46285)","status":"published","published":"2023-02-10T11:05:33Z","modified":"2026-08-18T01:17:30.730990738Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2024-2306","title":"motif security update","description":"This module is motif run-time environment, which includes the motif shared libraries.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.(CVE-2022-44617)\r\n\r\nA flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.(CVE-2022-46285)","status":"published","published":"2024-11-01T11:07:47Z","modified":"2026-08-18T01:17:37.26951678Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2023:0378","title":"Red Hat Security Advisory: libXpm security update","status":"published","published":"2024-09-16T10:32:25Z","modified":"2026-06-27T10:16:28Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0379","title":"Red Hat Security Advisory: libXpm security update","status":"published","published":"2024-09-16T10:31:44Z","modified":"2026-06-27T10:16:29Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0380","title":"Red Hat Security Advisory: libXpm security update","status":"published","published":"2024-09-16T10:32:35Z","modified":"2026-06-27T10:16:30Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0381","title":"Red Hat Security Advisory: libXpm security update","status":"published","published":"2024-09-16T10:32:45Z","modified":"2026-06-27T10:16:30Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0382","title":"Red Hat Security Advisory: libXpm security update","status":"published","published":"2024-09-16T10:31:54Z","modified":"2026-06-27T10:16:31Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0383","title":"Red Hat Security Advisory: libXpm security update","status":"published","published":"2024-09-16T10:32:15Z","modified":"2026-06-27T10:16:32Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0384","title":"Red Hat Security Advisory: libXpm security update","status":"published","published":"2024-09-16T10:32:05Z","modified":"2026-06-27T10:16:32Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RLSA-2023:0379","title":"Important: libXpm security update","description":"X.Org X11 libXpm runtime library.\n\nSecurity Fix(es):\n\n* libXpm: compression commands depend on $PATH (CVE-2022-4883)\n\n* libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)\n\n* libXpm: Infinite loop on unclosed comments (CVE-2022-46285)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T17:21:13Z","modified":"2026-02-05T06:30:10.772797Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:0383","title":"Important: libXpm security update","description":"X.Org X11 libXpm runtime library.\n\nSecurity Fix(es):\n\n* libXpm: compression commands depend on $PATH (CVE-2022-4883)\n\n* libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)\n\n* libXpm: Infinite loop on unclosed comments (CVE-2022-46285)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T17:22:02Z","modified":"2026-02-05T08:00:10.945095Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-46285","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-01-17T00:00:00Z","modified":"2026-10-17T12:56:22.824176312Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"ALSA-2023:0379","title":"Important: libXpm security update","description":"X.Org X11 libXpm runtime library.\n\nSecurity Fix(es):\n\n* libXpm: compression commands depend on $PATH (CVE-2022-4883)\n* libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)\n* libXpm: Infinite loop on unclosed comments (CVE-2022-46285)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T00:00:00Z","modified":"2026-10-29T11:01:58.603784783Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:0383","title":"Important: libXpm security update","description":"X.Org X11 libXpm runtime library.\n\nSecurity Fix(es):\n\n* libXpm: compression commands depend on $PATH (CVE-2022-4883)\n* libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)\n* libXpm: Infinite loop on unclosed comments (CVE-2022-46285)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T00:00:00Z","modified":"2026-10-29T11:31:22.237700887Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DEBIAN-CVE-2022-46285","description":"A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.","status":"published","published":"2023-02-07T19:15:09.147Z","modified":"2026-11-03T06:03:01.716944404Z","updated_at":"2026-11-03T06:43:01.507088Z"},{"id":"DLA-3459-1","title":"libxpm - security update","status":"published","published":"2023-06-20T00:00:00Z","modified":"2026-03-09T01:20:14.374924Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2023-0031","title":"Updated libxpm packages fix security vulnerability","description":"libXpm incorrectly handled calling external helper binaries.  If libXpm\nwas being used by a setuid binary, a local attacker could possibly use\nthis issue to escalate privileges. (CVE-2022-4883)\n\nlibXpm incorrectly handled certain XPM files.  If a user or automated\nsystem were tricked into opening a specially crafted XPM file, a remote\nattacker could possibly use this issue to cause libXpm to stop responding,\nresulting in a denial of service. (CVE-2022-44617, CVE-2022-46285)\n","status":"published","published":"2023-02-07T00:06:39Z","modified":"2026-04-16T04:44:22.315500288Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12617-1","title":"libXpm-devel-3.5.14-2.1 on GA media","description":"These are all security issues fixed in the libXpm-devel-3.5.14-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:54:58.21133Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0165-1","title":"Security update for libXpm","description":"This update for libXpm fixes the following issues:\n\n- CVE-2022-46285: Fixed an infinite loop that could be triggered\n  when reading a XPM image with a C-style comment that is never\n  closed (bsc#1207029).\n- CVE-2022-44617: Fixed an excessive resource consumption that could\n  be triggered when reading small crafted XPM image (bsc#1207030).\n- CVE-2022-4883: Fixed an issue that made decompression commands\n  susceptible to PATH environment variable manipulation attacks\n  (bsc#1207031).\n","status":"published","published":"2023-01-26T17:26:48Z","modified":"2026-02-04T03:12:13.60656Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0171-1","title":"Security update for libXpm","description":"This update for libXpm fixes the following issues:\n\n- CVE-2022-46285: Fixed an infinite loop that could be triggered\n  when reading a XPM image with a C-style comment that is never\n  closed (bsc#1207029).\n- CVE-2022-44617: Fixed an excessive resource consumption that could\n  be triggered when reading small crafted XPM image (bsc#1207030).\n- CVE-2022-4883: Fixed an issue that made decompression commands\n  susceptible to PATH environment variable manipulation attacks\n  (bsc#1207031).\n","status":"published","published":"2023-01-26T17:32:15Z","modified":"2026-02-04T04:13:09.0707Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5807-1","title":"libxpm vulnerabilities","description":"Martin Ettl discovered that libXpm incorrectly handled certain XPM files.\nIf a user or automated system were tricked into opening a specially crafted\nXPM file, a remote attacker could possibly use this issue to cause libXpm\nto stop responding, resulting in a denial of service. (CVE-2022-44617)\n\nMarco Ivaldi discovered that libXpm incorrectly handled certain XPM files.\nIf a user or automated system were tricked into opening a specially crafted\nXPM file, a remote attacker could possibly use this issue to cause libXpm\nto stop responding, resulting in a denial of service. (CVE-2022-46285)\n\nAlan Coopersmith discovered that libXpm incorrectly handled calling\nexternal helper binaries. If libXpm was being used by a setuid binary, a\nlocal attacker could possibly use this issue to escalate privileges.\n(CVE-2022-4883)\n","status":"published","published":"2023-01-17T17:21:21Z","modified":"2026-04-27T16:29:09.064787Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5807-2","title":"libxpm vulnerabilities","description":"USN-5807-1 fixed vulnerabilities in libXpm. This update provides the\ncorresponding updates for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Martin Ettl discovered that libXpm incorrectly handled certain XPM files.\n If a user or automated system were tricked into opening a specially crafted\n XPM file, a remote attacker could possibly use this issue to cause libXpm\n to stop responding, resulting in a denial of service. (CVE-2022-44617)\n\n Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files.\n If a user or automated system were tricked into opening a specially crafted\n XPM file, a remote attacker could possibly use this issue to cause libXpm\n to stop responding, resulting in a denial of service. (CVE-2022-46285)\n\n Alan Coopersmith discovered that libXpm incorrectly handled calling\n external helper binaries. If libXpm was being used by a setuid binary, a\n local attacker could possibly use this issue to escalate privileges.\n (CVE-2022-4883)\n","status":"published","published":"2023-02-21T09:41:46Z","modified":"2026-06-25T13:31:41.591699967Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5807-3","title":"libxpm vulnerability","description":"USN-5807-1 fixed a vulnerability in libXpm. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files.\n If a user or automated system were tricked into opening a specially crafted\n XPM file, a remote attacker could possibly use this issue to cause libXpm\n to stop responding, resulting in a denial of service. (CVE-2022-46285)\n","status":"published","published":"2023-07-26T10:33:27Z","modified":"2026-06-29T13:50:45.275309111Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}