High severity7.5NVD Advisory· Published Feb 6, 2023· Updated Jun 17, 2026
CVE-2022-44617
CVE-2022-44617
Description
A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
40- osv-coords37 versionspkg:apk/chainguard/libxpmpkg:apk/chainguard/libxpm-devpkg:apk/chainguard/libxpm-docpkg:apk/wolfi/libxpmpkg:apk/wolfi/libxpm-devpkg:apk/wolfi/libxpm-docpkg:rpm/almalinux/libXpmpkg:rpm/almalinux/libXpm-develpkg:rpm/opensuse/libXpm&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/libXpm&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/libXpm&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/libXpm&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/libXpm&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4pkg:rpm/suse/libXpm&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/libXpm&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.2pkg:rpm/suse/libXpm&distro=SUSE%20Manager%20Server%204.2pkg:rpm/suse/libXpm&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/libXpm&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 3.5.15-r0+ 36 more
- (no CPE)range: < 3.5.15-r0
- (no CPE)range: < 3.5.15-r0
- (no CPE)range: < 3.5.15-r0
- (no CPE)range: < 3.5.15-r0
- (no CPE)range: < 3.5.15-r0
- (no CPE)range: < 3.5.15-r0
- (no CPE)range: < 3.5.12-9.el8_7
- (no CPE)range: < 3.5.12-9.el8_7
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.11-6.7.1
- (no CPE)range: < 3.5.11-6.7.1
- (no CPE)range: < 3.5.11-6.7.1
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.11-6.7.1
- (no CPE)range: < 3.5.11-6.7.1
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.11-6.7.1
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.12-150000.3.7.2
- (no CPE)range: < 3.5.11-6.7.1
- (no CPE)range: < 3.5.11-6.7.1
Patches
Vulnerability mechanics
References
5- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/f80fa6ae47ad4a5beacb28nvd
- gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/9nvd
- lists.debian.org/debian-lts-announce/2023/06/msg00021.htmlnvd
- lists.x.org/archives/xorg-announce/2023-January/003312.htmlnvd
News mentions
0No linked articles in our index yet.