CVE-2018-6197
Fixed in a distro release EPSS 4%
w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.
Products: tats w3m, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.23 | w3m | 0.5.3_git20241203-r0 |
| Debian 12 | w3m | 0.5.3-36 |
| Debian 13 | w3m | 0.5.3-36 |
| Debian 14 | w3m | 0.5.3-36 |
| Debian 8 | w3m | 0.5.3-19+deb8u3 |
| SUSE Linux Enterprise Desktop 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Desktop 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| Ubuntu 14.04 LTS | w3m | 0.5.3-15ubuntu0.2 |
| Ubuntu 16.04 LTS | w3m | 0.5.3-26ubuntu0.2 |
| openSUSE Tumbleweed | w3m | 0.5.3+git20180125-1.14 |