Описание
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.
Ссылки
- Release NotesVendor Advisory
- Release NotesThird Party Advisory
- Release NotesVendor Advisory
- Release NotesThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:lynx_project:lynx:2.8.9:dev15:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.0043
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-416
Связанные уязвимости
CVSS3: 5.3
ubuntu
около 8 лет назад
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.
CVSS3: 5.3
redhat
около 8 лет назад
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.
CVSS3: 5.3
debian
около 8 лет назад
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML ...
EPSS
Процентиль: 62%
0.0043
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-416