PatchTheCVEman2html vulnerabilities and fixes
Recent CVEs affecting man2html, with upgrade or downgrade steps. 2 tracked.
man2html has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-09. Highest priority: CVE-2021-40648 (score 31/100).
- CVE-2021-40648 MEDIUM 5.5 DOWNGRADE In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the
- CVE-2021-40647 MEDIUM 5.5 DOWNGRADE In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chu
FAQ
How do I fix man2html vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is man2html being exploited right now?
None of the tracked man2html CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which man2html CVE should I patch first?
CVE-2021-40648 currently ranks highest (31/100): In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the.