Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-4883

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.

Published

2023-02-07T19:15:09.223

Last Modified

2025-03-20T20:15:26.757

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-426
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application x.org libxpm < 3.5.15 Yes
References