Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in w3m ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
w3m ist ein Text File Viewer und kann auch als Textmodus Web-Browser genutzt werden.
Vulnerabilities 2
-
Medium 4.7
W3m: out of bounds read in strnew_size() at w3m/str.c
An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
-
Medium 4.7
W3m: out of bounds read in growbuf_to_str() at w3m/indep.c
An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
Revision history
-
#3
Neue Updates von Fedora aufgenommen
-
#2
Neue Updates von SUSE aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Bugzilla Bug ID: 2222775 vom 2023-07-13
https://bugzilla.redhat.com/show_bug.cgi?id=2222775
-
Red Hat Bugzilla Bug ID: 2222779 vom 2023-07-13
https://bugzilla.redhat.com/show_bug.cgi?id=2222779
-
SUSE Security Update SUSE-SU-2023:4439-1 vom 2023-11-14
https://lists.suse.com/pipermail/sle-security-updates/2023-November/017034.html
-
Fedora Security Advisory FEDORA-EPEL-2024-0398EBBBFA vom 2024-03-19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0398ebbbfa
-
Fedora Security Advisory FEDORA-2024-AEB75F8B5B vom 2024-03-19
https://bodhi.fedoraproject.org/updates/FEDORA-2024-aeb75f8b5b
-
Fedora Security Advisory FEDORA-2024-3FC66F8BF3 vom 2024-03-19
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3fc66f8bf3
-
Fedora Security Advisory FEDORA-2024-38C2261CA0 vom 2024-03-19
https://bodhi.fedoraproject.org/updates/FEDORA-2024-38c2261ca0
-
Fedora Security Advisory FEDORA-EPEL-2024-BF31852FE0 vom 2024-03-19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-bf31852fe0
-
Fedora Security Advisory FEDORA-EPEL-2024-5253D48B14 vom 2024-03-19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-5253d48b14