Vulnerability · Published Aug 7, 2021 · Assigned by mitre
CVE-2021-38165
Medium 5.3
In plain English
A medium-severity security flaw in the lynx package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.9% (higher than 90% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)3.9%top 9.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | lynx | 2.8.9-4.el8 | ALSA-2022:2129 |
| Alpine:v3.20 | lynx | 2.8.9_p1-r3 | ALPINE-CVE-2021-38165 |
| Alpine:v3.21 | lynx | 2.8.9_p1-r3 | ALPINE-CVE-2021-38165 |
| Alpine:v3.22 | lynx | 2.8.9_p1-r3 | ALPINE-CVE-2021-38165 |
| Alpine:v3.23 | lynx | 2.8.9_p1-r3 | ALPINE-CVE-2021-38165 |
| Alpine:v3.24 | lynx | 2.8.9_p1-r3 | ALPINE-CVE-2021-38165 |
| Debian:12 | lynx | 2.9.0dev.6-3 | DEBIAN-CVE-2021-38165 |
| Debian:13 | lynx | 2.9.0dev.6-3 | DEBIAN-CVE-2021-38165 |
| Debian:14 | lynx | 2.9.0dev.6-3 | DEBIAN-CVE-2021-38165 |
| Rocky Linux:8 | lynx | 0:2.8.9-4.el8 | RLSA-2022:2129 |
Affected products (as reported)
References
- https://bugs.debian.org/991971 x_refsource_MISC
- https://www.openwall.com/lists/oss-security/2021/08/07/1 x_refsource_MISC
- https://lynx.invisible-island.net/current/CHANGES.html x_refsource_MISC
- https://github.com/w3c/libwww/blob/f010b4cc58d32f34b162f0084fe093f7097a61f0/Library/src/HTParse.c#L118 x_refsource_MISC
- [oss-security] 20210807 Re: Bug#991971: [Lynx-dev] bug in Lynx' SSL certificate validation -> leaks password in clear text via SNI (under some circumstances) mailing-list, x_refsource_MLIST
- https://www.openwall.com/lists/oss-security/2021/08/07/11 x_refsource_MISC
- [oss-security] 20210807 Re: Re: Bug#991971: [Lynx-dev] bug in Lynx' SSL certificate validation -> leaks password in clear text via SNI (under some circumstances) mailing-list, x_refsource_MLIST
- [oss-security] 20210807 Re: Re: Bug#991971: [Lynx-dev] bug in Lynx' SSL certificate validation -> leaks password in clear text via SNI (under some circumstances) mailing-list, x_refsource_MLIST
- [debian-lts-announce] 20210809 [SECURITY] [DLA 2736-1] lynx security update mailing-list, x_refsource_MLIST
- DSA-4953 vendor-advisory, x_refsource_DEBIAN
- FEDORA-2021-f59bda7d94 vendor-advisory, x_refsource_FEDORA
- FEDORA-2021-232161e4d5 vendor-advisory, x_refsource_FEDORA
- FEDORA-2021-57287bd052 vendor-advisory, x_refsource_FEDORA