CVE catalog

CVE-2022-38223

w3m: CVE-2022-38223

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.47% · Oct 25, 2026

There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianw3msid0.5.3+git20230121-2.3fixed
Debianw3mforky0.5.3+git20230121-2.3fixed
Debianw3mtrixie0.5.3+git20230121-2.1fixed
Debianw3mbookworm0.5.3+git20230121-2fixed
Ubuntuw3mpro0.5.3-11vulnerable
Ubuntuw3mpro0.5.3-12vulnerable
Ubuntuw3mpro0.5.3-13vulnerable
Ubuntuw3mpro0.5.3-15vulnerable
Ubuntuw3mpro0.5.3-15ubuntu0.1vulnerable
Ubuntuw3mpro0.5.3-15ubuntu0.2vulnerable
Ubuntuw3mpro0.5.3-15ubuntu0.2+esm1fixed
Ubuntuw3m18.040.5.3-34vulnerable
Ubuntuw3m18.040.5.3-34.1vulnerable
Ubuntuw3m18.040.5.3-35vulnerable
Ubuntuw3m18.040.5.3-36vulnerable
Ubuntuw3m18.040.5.3-36build1vulnerable
Ubuntuw3m18.040.5.3-36ubuntu0.1fixed
Ubuntuw3m20.040.5.3-37vulnerable
Ubuntuw3m20.040.5.3-37ubuntu0.1fixed
Ubuntuw3m22.040.5.3+git20210102-6build1vulnerable
Ubuntuw3m22.040.5.3+git20210102-6build2vulnerable
Ubuntuw3m22.040.5.3+git20210102-6build3vulnerable
Ubuntuw3m22.040.5.3+git20210102-6ubuntu0.1fixed
Ubuntuw3mpro0.5.3-11vulnerable
Ubuntuw3mpro0.5.3-12vulnerable
Ubuntuw3mpro0.5.3-13vulnerable
Ubuntuw3mpro0.5.3-15vulnerable
Ubuntuw3mpro0.5.3-15ubuntu0.1vulnerable
Ubuntuw3mpro0.5.3-15ubuntu0.2vulnerable
Ubuntuw3mpro0.5.3-15ubuntu0.2+esm1fixed
Ubuntuw3m16.040.5.3-24vulnerable
Ubuntuw3m16.040.5.3-25vulnerable
Ubuntuw3m16.040.5.3-26vulnerable
Ubuntuw3m16.040.5.3-26build1vulnerable
Ubuntuw3m16.040.5.3-26ubuntu0.1vulnerable
Ubuntuw3m16.040.5.3-26ubuntu0.2vulnerable
Ubuntuw3m18.040.5.3-34vulnerable
Ubuntuw3m18.040.5.3-34.1vulnerable
Ubuntuw3m18.040.5.3-35vulnerable
Ubuntuw3m18.040.5.3-36vulnerable
Ubuntuw3m18.040.5.3-36build1vulnerable
Ubuntuw3m18.040.5.3-36ubuntu0.1fixed
Ubuntuw3m20.040.5.3-37vulnerable
Ubuntuw3m20.040.5.3-37ubuntu0.1fixed
Ubuntuw3m22.040.5.3+git20210102-6build1vulnerable
Ubuntuw3m22.040.5.3+git20210102-6build2vulnerable
Ubuntuw3m22.040.5.3+git20210102-6build3vulnerable
Ubuntuw3m22.040.5.3+git20210102-6ubuntu0.1fixed
Susew3mlinux enterprise server 12 sp50.5.3.git20161120-161.6.1fixed
Susew3mlinux enterprise server for sap applications 12 sp50.5.3.git20161120-161.6.1fixed
Opensusew3mtumbleweed0.5.3+git20180125-2.1fixed
Susew3mlinux enterprise module for basesystem 15 sp40.5.3+git20180125-150000.3.3.1fixed
Susew3mlinux enterprise real time 15 sp30.5.3+git20180125-150000.3.3.1fixed
Opensusew3mleap 15.40.5.3+git20180125-150000.3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianw3msourcesid0.5.3+git20230121-1not yet assignedNot reported[1019599]
Debianw3msourceforky0.5.3+git20230121-1not yet assignedNot reported[1019599]
Debianw3msourcetrixie0.5.3+git20230121-1not yet assignedNot reported[1019599]
Debianw3msourcebookworm0.5.3+git20230121-1not yet assignedNot reported[1019599]
Ubuntuw3mdebpro0.5.3-15ubuntu0.2+esm1Not reportedUSN-5796-2Not reported
Ubuntuw3mdeb18.040.5.3-36ubuntu0.1Not reportedUSN-5796-1Not reported
Ubuntuw3mdeb20.040.5.3-37ubuntu0.1Not reportedUSN-5796-1Not reported
Ubuntuw3mdeb22.040.5.3+git20210102-6ubuntu0.1Not reportedUSN-5796-1Not reported
Ubuntuw3mdebpro0.5.3-15ubuntu0.2+esm1Not reportedUBUNTU-CVE-2022-38223Not reported
Ubuntuw3mdeb18.040.5.3-36ubuntu0.1Not reportedUBUNTU-CVE-2022-38223Not reported
Ubuntuw3mdeb20.040.5.3-37ubuntu0.1Not reportedUBUNTU-CVE-2022-38223Not reported
Ubuntuw3mdeb22.040.5.3+git20210102-6ubuntu0.1Not reportedUBUNTU-CVE-2022-38223Not reported
Susew3mrpmlinux enterprise server 12 sp50.5.3.git20161120-161.6.1Not reportedSUSE-SU-2023:0066-1Not reported
Susew3mrpmlinux enterprise server for sap applications 12 sp50.5.3.git20161120-161.6.1Not reportedSUSE-SU-2023:0066-1Not reported
Opensusew3mrpmtumbleweed0.5.3+git20180125-2.1Not reportedOPENSUSE-SU-2024:12612-1Not reported
Susew3mrpmlinux enterprise module for basesystem 15 sp40.5.3+git20180125-150000.3.3.1Not reportedSUSE-SU-2023:0065-1Not reported
Susew3mrpmlinux enterprise real time 15 sp30.5.3+git20180125-150000.3.3.1Not reportedSUSE-SU-2023:0065-1Not reported
Opensusew3mrpmleap 15.40.5.3+git20180125-150000.3.3.1Not reportedSUSE-SU-2023:0065-1Not reported

[Debian bug #1019599]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [w3m-inline-image]Unknown

    Source package: [w3m]

    Details (1)

    • 0.5.6-1.4 · x86_64 · tumbleweed

      Unknown · Fixed: 0.5.3+git20180125-2.1

      Version impact unknown

      dsa · w3m · opensuse · tumbleweed

  • [w3m]Fixed

    Source package: [w3m]

    Details (1)

    • 0.5.6-1.4 · x86_64 · tumbleweed

      Fixed · Fixed: 0.5.3+git20180125-2.1

      dsa · w3m · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [w3m]Fixed
    Details (2)

    • 0.5.3+git20230121-2 · amd64 · bookworm

      Fixed · Fixed: 0.5.3+git20230121-1

      dsa · w3m · debian · bookworm

    • 0.5.3+git20230121-2 · arm64 · bookworm

      Fixed · Fixed: 0.5.3+git20230121-1

      dsa · w3m · debian · bookworm

  • [w3m-img]Fixed

    Source package: [w3m]

    Details (2)

    • 0.5.3+git20230121-2 · amd64 · bookworm

      Fixed · Fixed: 0.5.3+git20230121-1

      dsa · w3m · debian · bookworm

    • 0.5.3+git20230121-2 · arm64 · bookworm

      Fixed · Fixed: 0.5.3+git20230121-1

      dsa · w3m · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]