{"id":"CVE-2016-9621","aliases":["EUVD-2016-10423","SUSE-SU-2016:3046-1","SUSE-SU-2016:3053-1","openSUSE-SU-2024:10235-1"],"status":"rejected","title":"Security update for w3m","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9429.  Reason: This candidate is a reservation duplicate of CVE-2016-9429.  Notes: All CVE users should reference CVE-2016-9429 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-11-25T19:00:00Z","modified":"2026-02-04T04:30:15Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-4.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-4.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-160.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-160.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-160.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-160.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-160.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-160.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-160.1"}]}],"bundled":23},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-1.1"}]}],"bundled":25}],"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163046-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1011269","tags":["report"]},{"url":"https://bugzilla.suse.com/1011270","tags":["report"]},{"url":"https://bugzilla.suse.com/1011271","tags":["report"]},{"url":"https://bugzilla.suse.com/1011272","tags":["report"]},{"url":"https://bugzilla.suse.com/1011283","tags":["report"]},{"url":"https://bugzilla.suse.com/1011284","tags":["report"]},{"url":"https://bugzilla.suse.com/1011285","tags":["report"]},{"url":"https://bugzilla.suse.com/1011286","tags":["report"]},{"url":"https://bugzilla.suse.com/1011287","tags":["report"]},{"url":"https://bugzilla.suse.com/1011288","tags":["report"]},{"url":"https://bugzilla.suse.com/1011289","tags":["report"]},{"url":"https://bugzilla.suse.com/1011290","tags":["report"]},{"url":"https://bugzilla.suse.com/1011291","tags":["report"]},{"url":"https://bugzilla.suse.com/1011292","tags":["report"]},{"url":"https://bugzilla.suse.com/1011293","tags":["report"]},{"url":"https://bugzilla.suse.com/1012020","tags":["report"]},{"url":"https://bugzilla.suse.com/1012021","tags":["report"]},{"url":"https://bugzilla.suse.com/1012022","tags":["report"]},{"url":"https://bugzilla.suse.com/1012023","tags":["report"]},{"url":"https://bugzilla.suse.com/1012024","tags":["report"]},{"url":"https://bugzilla.suse.com/1012025","tags":["report"]},{"url":"https://bugzilla.suse.com/1012026","tags":["report"]},{"url":"https://bugzilla.suse.com/1012027","tags":["report"]},{"url":"https://bugzilla.suse.com/1012028","tags":["report"]},{"url":"https://bugzilla.suse.com/1012029","tags":["report"]},{"url":"https://bugzilla.suse.com/1012030","tags":["report"]},{"url":"https://bugzilla.suse.com/1012031","tags":["report"]},{"url":"https://bugzilla.suse.com/1012032","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9633","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163053-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-9621","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9429.  Reason: This candidate is a reservation duplicate of CVE-2016-9429.  Notes: All CVE users should reference CVE-2016-9429 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2016-11-25T19:00:00Z","modified":"2016-11-25T19:57:01Z","updated_at":"2026-11-02T14:33:31.764001Z"}],"euvd":[{"id":"EUVD-2016-10423","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9429.  Reason: This candidate is a reservation duplicate of CVE-2016-9429.  Notes: All CVE users should reference CVE-2016-9429 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2016-11-25T19:00:00Z","modified":"2016-11-25T19:57:01Z","updated_at":"2026-11-03T04:08:14.423169Z"}],"nvd":[{"id":"CVE-2016-9621","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9429.  Reason: This candidate is a reservation duplicate of CVE-2016-9429.  Notes: All CVE users should reference CVE-2016-9429 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2016-11-25T19:59:00.117Z","modified":"2023-11-07T02:37:19.04Z","updated_at":"2026-11-02T14:03:32.79141Z"}],"osv":[{"id":"openSUSE-SU-2024:10235-1","title":"w3m-0.5.3.git20161120-1.1 on GA media","description":"These are all security issues fixed in the w3m-0.5.3.git20161120-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:01:39.620379Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:3046-1","title":"Security update for w3m","description":"\nThis update for w3m fixes the following issues:\n\n- update to debian git version (bsc#1011293)\n  addressed security issues:\n         CVE-2016-9621: w3m: global-buffer-overflow write (bsc#1012020)\n         CVE-2016-9622: w3m: null deref (bsc#1012021)\n         CVE-2016-9623: w3m: null deref (bsc#1012022)\n         CVE-2016-9624: w3m: near-null deref (bsc#1012023)\n         CVE-2016-9625: w3m: stack overflow (bsc#1012024)\n         CVE-2016-9626: w3m: stack overflow (bsc#1012025)\n         CVE-2016-9627: w3m: heap overflow read + deref (bsc#1012026)\n         CVE-2016-9628: w3m: null deref (bsc#1012027)\n         CVE-2016-9629: w3m: null deref (bsc#1012028)\n         CVE-2016-9630: w3m: global-buffer-overflow read (bsc#1012029)\n         CVE-2016-9631: w3m: null deref (bsc#1012030)\n         CVE-2016-9632: w3m: global-buffer-overflow read (bsc#1012031)\n         CVE-2016-9633: w3m: OOM (bsc#1012032)\n         CVE-2016-9434: w3m: null deref (bsc#1011283)\n         CVE-2016-9435: w3m: use uninit value (bsc#1011284)\n         CVE-2016-9436: w3m: use uninit value (bsc#1011285)\n         CVE-2016-9437: w3m: write to rodata (bsc#1011286)\n         CVE-2016-9438: w3m: null deref (bsc#1011287)\n         CVE-2016-9439: w3m: stack overflow (bsc#1011288)\n         CVE-2016-9440: w3m: near-null deref (bsc#1011289)\n         CVE-2016-9441: w3m: near-null deref (bsc#1011290)\n         CVE-2016-9442: w3m: potential heap buffer corruption (bsc#1011291)\n         CVE-2016-9443: w3m: null deref (bsc#1011292)\n","status":"published","published":"2016-12-07T15:45:29Z","modified":"2026-02-04T04:30:15.240812Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:3053-1","title":"Security update for w3m","description":"\nThis update for w3m fixes the following issues:\n\n- update to debian git version (bsc#1011293)\n  addressed security issues:\n         CVE-2016-9622: w3m: null deref (bsc#1012021)\n         CVE-2016-9623: w3m: null deref (bsc#1012022)\n         CVE-2016-9624: w3m: near-null deref (bsc#1012023)\n         CVE-2016-9625: w3m: stack overflow (bsc#1012024)\n         CVE-2016-9626: w3m: stack overflow (bsc#1012025)\n         CVE-2016-9627: w3m: heap overflow read + deref (bsc#1012026)\n         CVE-2016-9628: w3m: null deref (bsc#1012027)\n         CVE-2016-9629: w3m: null deref (bsc#1012028)\n         CVE-2016-9630: w3m: global-buffer-overflow read (bsc#1012029)\n         CVE-2016-9631: w3m: null deref (bsc#1012030)\n         CVE-2016-9632: w3m: global-buffer-overflow read (bsc#1012031)\n         CVE-2016-9633: w3m: OOM (bsc#1012032)\n         CVE-2016-9434: w3m: null deref (bsc#1011283)\n         CVE-2016-9435: w3m: use uninit value (bsc#1011284)\n         CVE-2016-9436: w3m: use uninit value (bsc#1011285)\n         CVE-2016-9437: w3m: write to rodata (bsc#1011286)\n         CVE-2016-9438: w3m: null deref (bsc#1011287)\n         CVE-2016-9439: w3m: stack overflow (bsc#1011288)\n         CVE-2016-9440: w3m: near-null deref (bsc#1011289)\n         CVE-2016-9441: w3m: near-null deref (bsc#1011290)\n         CVE-2016-9442: w3m: potential heap buffer corruption (bsc#1011291)\n         CVE-2016-9443: w3m: null deref (bsc#1011292)\n","status":"published","published":"2016-12-08T10:06:04Z","modified":"2026-02-04T03:49:57.595956Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}