CVE-2023-4255
W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
概要
W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-4255 w3m
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report bugzilla.redhat.com
- report github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web packages.fedoraproject.org