CVE-2022-38223

2022-08-1511:21:43

Debian Security Bug Tracker

security-tracker.debian.org

vulnerability

out-of-bounds write

w3m 0.5.3

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.3%

JSON

There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.

OSVersionArchitecturePackageVersionFilename
Debian12allw3m< 0.5.3+git20230121-1w3m_0.5.3+git20230121-1_all.deb
Debian11allw3m< 0.5.3+git20210102-6+deb11u1w3m_0.5.3+git20210102-6+deb11u1_all.deb
Debian999allw3m< 0.5.3+git20230121-1w3m_0.5.3+git20230121-1_all.deb
Debian13allw3m< 0.5.3+git20230121-1w3m_0.5.3+git20230121-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	w3m	< 0.5.3+git20230121-1	w3m_0.5.3+git20230121-1_all.deb
Debian	11	all	w3m	< 0.5.3+git20210102-6+deb11u1	w3m_0.5.3+git20210102-6+deb11u1_all.deb
Debian	999	all	w3m	< 0.5.3+git20230121-1	w3m_0.5.3+git20230121-1_all.deb
Debian	13	all	w3m	< 0.5.3+git20230121-1	w3m_0.5.3+git20230121-1_all.deb