CVE-2022-4883
A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, rel...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-4883 libxpm Corrigé dans: 3.5.15-r0
- BellSoft Alpaquita BELL-CVE-2022-4883
- Debian DEBIAN-CVE-2022-4883 libxpm Corrigé dans: 1:3.5.12-1.1~deb11u1
- Ubuntu UBUNTU-CVE-2022-4883 libxpm
Références
- advisory github.com
- advisory nvd.nist.gov
- patch gitlab.freedesktop.org
- patch gitlab.freedesktop.org
- report bugzilla.redhat.com
- web lists.x.org
- web lists.debian.org