Medium severity5.3NVD Advisory· Published Nov 17, 2017· Updated Jun 17, 2026

CVE-2017-1000211

Description

Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lynx/Lynx2 versions
cpe:2.3:a:lynx_project:lynx:2.8.9:dev15:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:lynx_project:lynx:2.8.9:dev15:*:*:*:*:*:*
- (no CPE)range: <2.8.9dev.16
osv-coords
pkg:rpm/suse/lynx&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4
Range: < 2.8.6-146.3.1

Patches

Vulnerability mechanics

References

lynx.invisible-island.net/current/CHANGES.htmlnvdRelease NotesVendor Advisory
github.com/ThomasDickey/lynx-snapshots/commit/280a61b300a1614f6037efc0902ff7ecf17146e9nvdRelease NotesThird Party Advisory
www.securityfocus.com/bid/102180nvd
lists.debian.org/debian-lts-announce/2017/11/msg00021.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000