Red Hat Security Advisory

RHSA-2022:2129

lynx security update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux CRB (v. 8) lynx-2.8.9-4.el8

Fixes 1 record

TI-2021-15844 CVE-2021-38165 · GHSA-88f3-hp86-v36f

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote…

LOW 31

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.03944 Published 2021-08-07 Partial fix CWE-522