Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9179

Опубликовано: 03 нояб. 2016
Источник: redhat
CVSS3: 5.4
CVSS2: 5.8
EPSS Низкий

Описание

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5lynxWill not fix
Red Hat Enterprise Linux 6lynxWill not fix
Red Hat Enterprise Linux 7lynxWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1391861lynx: Invalid URL parsing of pages containing '?'

EPSS

Процентиль: 81%
0.02004
Низкий

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 10 лет назад

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.

CVSS3: 7.5
nvd
почти 10 лет назад

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.

CVSS3: 7.5
msrc
около 1 года назад

It was found that Lynx doesn't parse the authority component of the URL correctly

CVSS3: 7.5
debian
почти 10 лет назад

lynx: It was found that Lynx doesn't parse the authority component of ...

suse-cvrf
больше 9 лет назад

Security update for lynx

EPSS

Процентиль: 81%
0.02004
Низкий

5.4 Medium

CVSS3

5.8 Medium

CVSS2