{"id":"CVE-2022-38223","aliases":["ALPINE-CVE-2022-38223","DEBIAN-CVE-2022-38223","DLA-3541-1","EUVD-2022-40815","GHSA-rf3p-g68h-h93f","MGASA-2023-0006","SUSE-SU-2023:0065-1","SUSE-SU-2023:0066-1","UBUNTU-CVE-2022-38223","USN-5796-1","USN-5796-2","openSUSE-SU-2024:12612-1"],"status":"published","title":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered...","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00472,"percentile":0.41154,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-08-15T00:00:00Z","modified":"2026-11-03T07:31:26Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"w3m","fixed_in":["0.5.3.20220429-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"w3m","fixed_in":["0.5.3.20230121-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"w3m","fixed_in":["0.5.3.20230121-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"w3m","fixed_in":["0.5.3.20230121-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"w3m","fixed_in":["0.5.3.20230121-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"w3m","fixed_in":["0.5.3_git20241203-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"w3m","fixed_in":["0.5.3_git20241203-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"w3m","fixed_in":["0.5.3_git20241203-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"w3m","fixed_in":["0.5.3+git20230121-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"w3m","fixed_in":["0.5.3+git20230121-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"w3m","fixed_in":["0.5.3+git20230121-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"w3m","fixed_in":["0.5.3-37+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"w3m","fixed_in":["0.5.3-13.git20220429.1.mga8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"w3m","fixed_in":["0.5.3+git20180125-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"w3m","fixed_in":["0.5.3+git20180125-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"w3m","fixed_in":["0.5.3+git20180125-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"w3m","fixed_in":["0.5.3.git20161120-161.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"w3m","fixed_in":["0.5.3.git20161120-161.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"w3m","fixed_in":["0.5.3-15ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"w3m","fixed_in":["0.5.3-36ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"w3m","fixed_in":["0.5.3-37ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"w3m","fixed_in":["0.5.3+git20210102-6ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"w3m","fixed_in":["0.5.3+git20180125-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.20220429-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.20230121-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.20230121-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.20230121-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.20230121-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3_git20241203-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3_git20241203-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3_git20241203-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20230121-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20230121-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20230121-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-37+deb10u1"}]}],"versions":["0.5.3-37"]},{"source":"osv","ecosystem":"Mageia:8","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-13.git20220429.1.mga8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20180125-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20180125-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20180125-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-161.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-161.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-15ubuntu0.2+esm1"}]}],"versions":["0.5.3-11","0.5.3-12","0.5.3-13","0.5.3-15","0.5.3-15ubuntu0.1","0.5.3-15ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.3-24","0.5.3-25","0.5.3-26","0.5.3-26build1","0.5.3-26ubuntu0.1","0.5.3-26ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-36ubuntu0.1"}]}],"versions":["0.5.3-34","0.5.3-34.1","0.5.3-35","0.5.3-36","0.5.3-36build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-37ubuntu0.1"}]}],"versions":["0.5.3-37"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20210102-6ubuntu0.1"}]}],"versions":["0.5.3+git20210102-6build1","0.5.3+git20210102-6build2","0.5.3+git20210102-6build3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-36ubuntu0.1"}]}],"versions":["0.5.3-34","0.5.3-34.1","0.5.3-35","0.5.3-36","0.5.3-36build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-37ubuntu0.1"}]}],"versions":["0.5.3-37"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20210102-6ubuntu0.1"}]}],"versions":["0.5.3+git20210102-6build1","0.5.3+git20210102-6build2","0.5.3+git20210102-6build3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-15ubuntu0.2+esm1"}]}],"versions":["0.5.3-11","0.5.3-12","0.5.3-13","0.5.3-15","0.5.3-15ubuntu0.1","0.5.3-15ubuntu0.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"w3m","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3+git20180125-2.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"tats","product":"w3m"}],"references":[{"url":"https://github.com/tats/w3m/issues/242","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NRRZMTLG3YT6U3PSGJOAMLDNLRF2EUOP/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKESIFZMWIFMI6DRGMUYOTVKBOSEKDXZ/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00030.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38223","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKESIFZMWIFMI6DRGMUYOTVKBOSEKDXZ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NRRZMTLG3YT6U3PSGJOAMLDNLRF2EUOP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKESIFZMWIFMI6DRGMUYOTVKBOSEKDXZ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NRRZMTLG3YT6U3PSGJOAMLDNLRF2EUOP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C"},{"url":"https://github.com/advisories/GHSA-rf3p-g68h-h93f"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-38223","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/38xxx/CVE-2022-38223.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-38223","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0006.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31365","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/NRRZMTLG3YT6U3PSGJOAMLDNLRF2EUOP/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230065-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202684","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38223","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230066-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-38223","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5796-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5796-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38223","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-38223","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","status":"published","published":"2022-08-15T00:00:00Z","modified":"2025-11-04T18:14:23.129Z","updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2022-40815","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","status":"published","published":"2022-08-15T00:00:00Z","modified":"2025-11-04T18:14:23Z","updated_at":"2026-11-02T19:49:25.004858Z"}],"ghsa":[{"id":"GHSA-rf3p-g68h-h93f","title":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered...","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","status":"published","published":"2022-08-16T00:00:31Z","modified":"2025-11-04T21:31:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:04:37.024156Z"}],"nvd":[{"id":"CVE-2022-38223","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","status":"published","published":"2022-08-15T11:21:43.557Z","modified":"2026-06-17T04:56:18.863Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:25.242752Z"}],"osv":[{"id":"ALPINE-CVE-2022-38223","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","status":"published","published":"2022-08-15T11:21:43.557Z","modified":"2026-11-03T07:31:26.060104857Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"UBUNTU-CVE-2022-38223","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","status":"published","published":"2022-08-15T11:21:00Z","modified":"2026-02-04T04:20:55.452516Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"CVE-2022-38223","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","status":"published","published":"2022-08-15T00:00:00Z","modified":"2026-10-28T02:30:38.504923706Z","updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DEBIAN-CVE-2022-38223","description":"There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.","status":"published","published":"2022-08-15T11:21:43.557Z","modified":"2026-11-03T06:02:43.64092164Z","updated_at":"2026-11-03T06:43:43.638289Z"},{"id":"DLA-3541-1","title":"w3m - security update","status":"published","published":"2023-08-24T00:00:00Z","modified":"2026-03-09T01:22:44.492081Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2023-0006","title":"Updated w3m packages fix security vulnerability","description":"There is an out-of-bounds write in checkType located in etc.c in w3m\n0.5.3. It can be triggered by sending a crafted HTML file to the w3m\nbinary. It allows an attacker to cause Denial of Service or possibly have\nunspecified other impact. (CVE-2022-38223)\n","status":"published","published":"2023-01-13T17:37:09Z","modified":"2026-04-16T04:44:32.508482399Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12612-1","title":"w3m-0.5.3+git20180125-2.1 on GA media","description":"These are all security issues fixed in the w3m-0.5.3+git20180125-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:20.200589Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0065-1","title":"Security update for w3m","description":"This update for w3m fixes the following issues:\n\n- CVE-2022-38223: Fixed a memory safety issue when dumping crafted\n  input to standard out (bsc#1202684).\n","status":"published","published":"2023-01-11T10:43:37Z","modified":"2026-02-04T02:43:38.031211Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0066-1","title":"Security update for w3m","description":"This update for w3m fixes the following issues:\n\n- CVE-2022-38223: Fixed a memory safety issue when dumping crafted\n  input to standard out (bsc#1202684).\n","status":"published","published":"2023-01-11T10:43:53Z","modified":"2026-02-04T04:02:27.525979Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5796-1","title":"w3m vulnerability","description":"It was discovered that w3m incorrectly handled certain HTML files. A remote\nattacker could use this issue to cause w3m to crash, resulting in a denial\nof service, or possibly execute arbitrary code.\n","status":"published","published":"2023-01-09T13:17:38Z","modified":"2026-04-27T16:28:16.575861Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5796-2","title":"w3m vulnerability","description":"USN-5796-1 fixed a vulnerability in w3m. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that w3m incorrectly handled certain HTML files. A remote\n attacker could use this issue to cause w3m to crash, resulting in a denial\n of service, or possibly execute arbitrary code.\n","status":"published","published":"2023-01-10T12:17:15Z","modified":"2026-06-29T13:50:44.56238773Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}