suse · CVE-2018-6197

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-6197 severity moderate: SUSE including 12 source package names (w3m, w3m-0.5.3+git20180125-1.14, …), 51 product×package rows across 48 product lines (Image SLES12-SP5-Azure-SAP-BYOS, Image SLES12-SP5-Azure-SAP-On-Demand, … (48 product lines)): Fixed 37, Known Not Affected 14.

Description:

w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.