CVE-2018-6198
Fixed in a distro release EPSS <1%
w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files.
Products: tats w3m, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.23 | w3m | 0.5.3_git20241203-r0 |
| Debian 12 | w3m | 0.5.3-36 |
| Debian 13 | w3m | 0.5.3-36 |
| Debian 14 | w3m | 0.5.3-36 |
| SUSE Linux Enterprise Desktop 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Desktop 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | w3m | 0.5.3.git20161120-161.3.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | w3m | 0.5.3.git20161120-161.3.4 |
| Ubuntu 14.04 LTS | w3m | 0.5.3-15ubuntu0.2 |
| Ubuntu 16.04 LTS | w3m | 0.5.3-26ubuntu0.2 |
| openSUSE Tumbleweed | w3m | 0.5.3+git20180125-1.14 |