Back to search
CVE-2023-38252
Published: Jul 14, 2023
Modified: Nov 21, 2025
PUBLISHED
CVSS v3.1
4.7
MEDIUM
Description
An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
| Vendor | Product | Versions |
|---|---|---|
Red Hat | Red Hat Enterprise Linux 6 | All versions |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
References
https://access.redhat.com/security/cve/CVE-2023-38252
vdb-entry
x_refsource_REDHAT
RHBZ#2222775
issue-tracking
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now