USN-8862-1: libXpm vulnerability
Ubuntu USN-8862-1 says malformed zero-dimension XPM images can make libXpm exhaust resources.
Ubuntu security notice USN-8862-1 says libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could make libXpm consume excessive resources and cause a denial of service. The notice does not cite a CVE or report in-the-wild exploitation.
- USN-8862-1 covers a flaw in libXpm XPM parsing.
- Zero-dimension image values can drive excessive resource use.
- A local attacker could cause denial of service; no exploitation is reported.
From the original article
It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.