PatchTheCVElinks vulnerabilities
Recent CVEs affecting links products. 3 tracked.
links has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-11-15. Highest priority: CVE-2006-5925 (score 55/100).
- CVE-2006-5925 HIGH 7.5 DOWNGRADE DOWNGRADE Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbit
- CVE-2004-1616 MEDIUM 5.0 DOWNGRADE Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email t
- CVE-2002-1405 MEDIUM 5.0 DOWNGRADE DOWNGRADE CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers in
FAQ
How do I fix links vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is links being exploited right now?
None of the tracked links CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which links CVE should I patch first?
CVE-2006-5925 currently ranks highest (55/100): Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbit.