CVE-2018-6197

Опубликовано: 25 янв. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html
http://www.securityfocus.com/bid/102846
Third Party Advisory
VDB Entry
https://github.com/tats/w3m/commit/7fdc83b0364005a0b5ed869230dd81752ba022e8
Patch
Third Party Advisory
https://github.com/tats/w3m/issues/89
Exploit
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/04/msg00025.html
https://usn.ubuntu.com/3555-1/
Third Party Advisory
https://usn.ubuntu.com/3555-2/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html
http://www.securityfocus.com/bid/102846
Third Party Advisory
VDB Entry
https://github.com/tats/w3m/commit/7fdc83b0364005a0b5ed869230dd81752ba022e8
Patch
Third Party Advisory
https://github.com/tats/w3m/issues/89
Exploit
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/04/msg00025.html
https://usn.ubuntu.com/3555-1/
Third Party Advisory
https://usn.ubuntu.com/3555-2/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tats:w3m:*:*:*:*:*:*:*:*

Версия до 0.5.3 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01145

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2018-6197

CVSS3: 7.5

ubuntu

около 8 лет назад

w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.

CVE-2018-6197

CVSS3: 3.3

redhat

около 8 лет назад

w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.

CVE-2018-6197

CVSS3: 7.5

debian

около 8 лет назад

w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formU ...

GHSA-w7fh-6798-hqc2

CVSS3: 7.5

github

больше 3 лет назад

w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.

openSUSE-SU-2019:1142-1

suse-cvrf

почти 7 лет назад

Security update for w3m

EPSS

Процентиль: 78%

0.01145

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476