Lucene search

K
redhatcveRedhat.comRH:CVE-2022-38223
HistorySep 13, 2022 - 12:54 p.m.

CVE-2022-38223

2022-09-1312:54:22
redhat.com
access.redhat.com
12
w3m
etc.c
out-of-bounds
denial of service
htmlfile

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

57.4%

An out-of-bounds write-in check type flaw was found in the etc.c function in w3m, triggered by sending a crafted HTML file to the w3m binary. This flaw allows an attacker to cause a denial of service and other possible impacts.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

57.4%