CVE-2022-38223
There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It a...
Original description
The description as published by the source.
There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-38223 w3m Fixed in: 0.5.3_git20241203-r0
- Debian DEBIAN-CVE-2022-38223 w3m Fixed in: 0.5.3+git20210102-6+deb11u1
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- report github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.debian.org