CVE:CVE-2023-38252
CNNVD:CNNVD-202307-1334
w3m是Tatsuya Kinoshita个人开发者的一种具有 WWW 功能的寻呼机。
w3m存在安全漏洞，该漏洞源于 Str.c 的 Strnew_size 方法存在越界读取问题，可能导致拒绝服务攻击。
solution:Upgrade w3m_project w3m to a higher version than 0.5.3+git20230121,and avoid the version 0.5.3+git20230121; Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 38,and avoid the version 38; Upgrade redhat enterprise_linux to a higher version than 6.0,and avoid the version 6.0