CVE-2023-4255
W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
Summary
W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
Original description
The description as published by the source.
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-4255 w3m
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report bugzilla.redhat.com
- report github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web packages.fedoraproject.org