CVE-2018-6196
Fixed in a distro release EPSS 3%
w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value.
Products: tats w3m, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.23 | w3m | 0.5.3_git20241203-r0 |
| Debian 12 | w3m | 0.5.3-36 |
| Debian 13 | w3m | 0.5.3-36 |
| Debian 14 | w3m | 0.5.3-36 |
| Debian 8 | w3m | 0.5.3-19+deb8u3 |
| SUSE Linux Enterprise Desktop 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Desktop 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| Ubuntu 14.04 LTS | w3m | 0.5.3-15ubuntu0.2 |
| Ubuntu 16.04 LTS | w3m | 0.5.3-26ubuntu0.2 |
| openSUSE Tumbleweed | w3m | 0.5.3+git20180125-1.14 |