w3m (SUSE:Linux Enterprise Server 12 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP3 package w3m, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2018-6196 — CVSS 7.5 (high): w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not…
• CVE-2018-6197 — CVSS 7.5 (high): w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.
• CVE-2018-6198 — CVSS 4.7 (medium): w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft…