[Fedora-i18n-bugs] [Bug 1399691] New: CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid
9:04 a.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1399691
Bug ID: 1399691
Summary: CVE-2016-9434 w3m: Null pointer dereference due to
incorrect form_int fid
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: eng-i18n-bugs(a)redhat.com,
i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com
A null pointer dereference will occur in w3m while parsing maliciously crafted
input.
Upstream bug:
https://github.com/tats/w3m/issues/15
Upstream fix:
https://github.com/tats/w3m/commit/3d4eeda9ec0cb91e23bab7dc260d4c515119eb4b
References:
http://seclists.org/oss-sec/2016/q4/321
--
You are receiving this mail because:
You are on the CC list for the bug.
10:02 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399691] CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid
https://bugzilla.redhat.com/show_bug.cgi?id=1399691
Andrej Nemec <anemec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1399744
--
You are receiving this mail because:
You are on the CC list for the bug.
2:52 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399691] CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid
https://bugzilla.redhat.com/show_bug.cgi?id=1399691
Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1401423
Depends On| |1401424
--- Comment #1 from Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> ---
Created w3m tracking bugs for this issue:
Affects: fedora-all [bug 1401423]
Affects: epel-7 [bug 1401424]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1401423
[Bug 1401423] w3m: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1401424
[Bug 1401424] w3m: various flaws [epel-7]
--
You are receiving this mail because:
You are on the CC list for the bug.
6:56 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1399691] CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid
https://bugzilla.redhat.com/show_bug.cgi?id=1399691
Bug 1399691 depends on bug 1401423, which changed state.
Bug 1401423 Summary: w3m: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1401423
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Resolution|--- |ERRATA
--
You are receiving this mail because:
You are on the CC list for the bug.
1:33 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399691] CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid
https://bugzilla.redhat.com/show_bug.cgi?id=1399691
Dhiru Kholia <dkholia(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Priority|medium |low
Whiteboard|impact=moderate,public=2016 |impact=low,public=20160816,
|0816,reported=20161103,sour |reported=20161103,source=os
|ce=oss-security,cvss2=4.3/A |s-security,cvss2=4.3/AV:N/A
|V:N/AC:M/Au:N/C:N/I:N/A:P,c |C:M/Au:N/C:N/I:N/A:P,cvss3=
|vss3=4.3/CVSS:3.0/AV:N/AC:L |4.3/CVSS:3.0/AV:N/AC:L/PR:N
|/PR:N/UI:R/S:U/C:N/I:N/A:L, |/UI:R/S:U/C:N/I:N/A:L,cwe=C
|cwe=CWE-476,fedora-all/w3m= |WE-476,fedora-all/w3m=affec
|affected,epel-7/w3m=affecte |ted,epel-7/w3m=affected,rhe
|d,rhel-5/w3m=new,rhel-6/w3m |l-5/w3m=new,rhel-6/w3m=new
|=new |
Severity|medium |low
--
You are receiving this mail because:
You are on the CC list for the bug.
1:34 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399691] CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid
https://bugzilla.redhat.com/show_bug.cgi?id=1399691
Dhiru Kholia <dkholia(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20160816, |impact=low,public=20160816,
|reported=20161103,source=os |reported=20161103,source=os
|s-security,cvss2=4.3/AV:N/A |s-security,cvss2=4.3/AV:N/A
|C:M/Au:N/C:N/I:N/A:P,cvss3= |C:M/Au:N/C:N/I:N/A:P,cvss3=
|4.3/CVSS:3.0/AV:N/AC:L/PR:N |4.3/CVSS:3.0/AV:N/AC:L/PR:N
|/UI:R/S:U/C:N/I:N/A:L,cwe=C |/UI:R/S:U/C:N/I:N/A:L,cwe=C
|WE-476,fedora-all/w3m=affec |WE-476,fedora-all/w3m=affec
|ted,epel-7/w3m=affected,rhe |ted,epel-7/w3m=affected,rhe
|l-5/w3m=new,rhel-6/w3m=new |l-5/w3m=notaffected,rhel-6/
| |w3m=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
1:34 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399691] CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid
https://bugzilla.redhat.com/show_bug.cgi?id=1399691
Dhiru Kholia <dkholia(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |NOTABUG
Last Closed| |2017-03-17 02:34:56
--
You are receiving this mail because:
You are on the CC list for the bug.
4:50 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1399691] CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid
https://bugzilla.redhat.com/show_bug.cgi?id=1399691
Bug 1399691 depends on bug 1401424, which changed state.
Bug 1401424 Summary: w3m: various flaws [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1401424
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Resolution|--- |ERRATA
--
You are receiving this mail because:
You are on the CC list for the bug.
2597
days inactive
2713
days old
i18n-bugs@lists.fedoraproject.org
7 comments
2 participants
participants (2)
-
bugzilla＠redhat.com -
Red Hat Bugzilla