CVE-2017-1000211

5

MEDIUMCVSS v2

Published

November 17, 2017

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.

lynx

NPMMinimalistic StatsD client for Node.js programs

= 2.8.9NVD

dscape/lynx

GitHubnode.js client for Etsy'd StatsD server

= 2.8.9NVD

ThomasDickey/lynx-snapshots

GitHub

More on this CVE

NVD↗GitHub Advisory↗

snapshots of releases and interim labels for "lynx"https://invisible-island.net/personal/git-exports.html (no pull requests)

NVD

Security Advisories

CVE-2017-1000211

Description

More on this CVE