CVE-2018-6196

HIGH7.5EPSS 0.67%

w3m - security update

Published: 1/25/2018Modified: 12/3/2025

Also known as:ALPINE-CVE-2018-6196DEBIAN-CVE-2018-6196

Description

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value.

Affected packages (3)

Alpine/w3mfrom 0, < 0.5.3_git20241203-r0
Debian/w3mfrom 0, < 0.5.3-36
Debian/w3mfrom 0, < 0.5.3-19+deb8u3

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2018-6196
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2018-6196