Lucene search
Ubuntu.comUB:CVE-2023-38252HistoryJul 14, 2023 - 12:00 a.m.
CVE-2023-38252
2023-07-1400:00:00
ubuntu.com
ubuntu.com
46
w3m
strnew_size
denial of service
crafted html file
security impact
out-of-bounds read
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
21.5%
An out-of-bounds read flaw was found in w3m, in the Strnew_size function in
Str.c. This issue may allow an attacker to cause a denial of service
through a crafted HTML file.
Notes
| Author | Note |
|---|---|
| Priority reason: Greatest impact is a crash (and therefore denial-of-service) in this command-line application - no real security impact. |
Related
veracode
veracode
Denial Of Service (DoS)
2023-08-07 18:11:28
alpinelinux
alpinelinux
CVE-2023-38252
2023-07-14 18:15:10
redhatcve
redhatcve
CVE-2023-38252
2023-07-13 17:07:12
prion
prion
Design/Logic Flaw
2023-07-14 18:15:00
nvd
nvd
CVE-2023-38252
2023-07-14 18:15:10
debiancve
debiancve
CVE-2023-38252
2023-07-14 18:15:10
cvelist
cvelist
CVE-2023-38252 W3m: out of bounds read in strnew_size() at w3m/str.c
2023-07-14 17:06:20
osv
osv
CVE-2023-38252
2023-07-14 18:15:10
w3m-0.5.3+git20230121-2.1 on GA media
2024-06-15 00:00:00
cve
cve
CVE-2023-38252
2023-07-14 18:15:10
openvas
openvas
openSUSE: Security Advisory for w3m (SUSE-SU-2023:4439-1)
2024-03-04 00:00:00
Mageia: Security Advisory (MGASA-2024-0105)
2024-04-05 00:00:00
Fedora: Security Advisory for w3m (FEDORA-2024-38c2261ca0)
2024-03-27 00:00:00
nessus
nessus
Fedora 39 : w3m (2024-3fc66f8bf3)
2024-03-26 00:00:00
Fedora 40 : w3m (2024-aeb75f8b5b)
2024-04-29 00:00:00
mageia
mageia
Updated w3m packages fix security vulnerabilities
2024-04-01 22:50:27
fedora
fedora
[SECURITY] Fedora 40 Update: w3m-0.5.3-63.git20230121.fc40
2024-03-23 00:54:00
[SECURITY] Fedora 39 Update: w3m-0.5.3-63.git20230121.fc39
2024-03-27 01:27:33
[SECURITY] Fedora 38 Update: w3m-0.5.3-63.git20230121.fc38
2024-03-27 01:37:42
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
21.5%
Related for UB:CVE-2023-38252