Most recent entries from all

ALSA-2022:2129 — Moderate: lynx security update

Affected: AlmaLinux:8: lynx

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags.

Security Fix(es):

* lynx: Disclosure of HTTP authentication credentials via SNI data (CVE-2021-38165)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-00255

EUVD-2026-30202

fkie_cve-2021-38165

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.

GHSA-88f3-hp86-v36f

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.

gsd-2021-38165

OESA-2021-1326 — lynx security update

Affected: openEuler:20.03-LTS-SP1: lynx, openEuler:20.03-LTS-SP2: lynx

Lynx is a fully-featured World Wide Web (WWW) client for users running cursor-addressable, character-cell display devices such as vt100 terminals, vt100 emulators running on Windows 95/NT or Macintoshes, or any other character-cell display. It will display Hypertext Markup Language (HTML) documents containing links to files on the local system, as well as files on remote systems running http, gopher, ftp, wais, nntp, finger, or cso/ph/qi servers, and services accessible via logins to telnet, tn3270 or rlogin accounts. Current versions of Lynx run on Unix, VMS, Windows95 through Windows 8, 386DOS and OS/2 EMX. Security Fix(es): Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.(CVE-2021-38165)

RHSA-2022:2129 — Red Hat Security Advisory: lynx security update

lynx: Disclosure of HTTP authentication credentials via SNI data

RLSA-2022:2129 — Moderate: lynx security update

Affected: Rocky Linux:8: lynx

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags.

Security Fix(es):

* lynx: Disclosure of HTTP authentication credentials via SNI data (CVE-2021-38165)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

UBUNTU-CVE-2021-38165

Affected: Ubuntu:Pro:16.04:LTS: lynx, Ubuntu:Pro:18.04:LTS: lynx, Ubuntu:Pro:20.04:LTS: lynx

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.

WID-SEC-W-2023-1822 — Lynx: Schwachstelle ermöglicht Offenlegung von Informationen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Lynx ausnutzen, um Informationen offenzulegen.