CVE-2023-4255
W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
Résumé
W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-4255 w3m
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report bugzilla.redhat.com
- report github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web packages.fedoraproject.org