Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-1000211
HistoryNov 17, 2017 - 12:00 a.m.

CVE-2017-1000211

2017-11-1700:00:00
ubuntu.com
ubuntu.com
9

0.002 Low

EPSS

Percentile

52.3%

Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML
parser resulting in memory disclosure, because HTML_put_string() can append
a chunk onto itself.

Notes

Author Note
tyhicks 2.8.9dev.16 contained the fix
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchlynx< 2.8.9dev8-4ubuntu1+esm1UNKNOWN