Medium severity5.5NVD Advisory· Published Dec 21, 2023· Updated Jun 17, 2026
CVE-2023-4255
CVE-2023-4255
Description
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- osv-coords2 versionspkg:rpm/suse/w3m&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/w3m&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
< 0.5.3.git20161120-161.9.1+ 1 more
- (no CPE)range: < 0.5.3.git20161120-161.9.1
- (no CPE)range: < 0.5.3.git20161120-161.9.1
- Fedora/Extra Packages for Enterprise Linuxv5
Patches
Vulnerability mechanics
References
7- github.com/tats/w3m/commit/edc602651c506aeeb60544b55534dd1722a340d3nvdPatch
- github.com/tats/w3m/pull/273nvdIssue TrackingPatch
- github.com/tats/w3m/issues/268nvdExploitIssue TrackingPatch
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/nvd
News mentions
0No linked articles in our index yet.