CVE Database
/

CVE-2023-38253

Back to search

CVE-2023-38253

Published: Jul 14, 2023

Modified: Feb 13, 2025

PUBLISHED

CVSS v3.1

4.7

MEDIUM

Description

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.

VendorProductVersions

n/a

w3m

All versions

Red Hat

Red Hat Enterprise Linux 6

All versions

Fedora

Extra Packages for Enterprise Linux

All versions

Fedora

Fedora

All versions

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now