CVE-2023-24039

A flaw was found in libXm, a library distributed by the motif package. A specially crafted XPM file with long color strings can lead to a stack-based buffer overflow in the ParseColors function due to the unsafe use of the strcat function, resulting in privilege escalation.

The libXm library as distributed by the motif package in Red Hat Enterprise Linux 7, 8 and 9 are not affected by this vulnerability because the unsafe strcat function call was already replaced with a safer function call in previous updates.

The dtprintinfo setuid binary is not distributed with Red Hat Enterprise Linux and Red Hat never provided support for CDE (Common Desktop Environment). See https://access.redhat.com/solutions/5547801 for more information.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.