p PatchFirst

CVE-2024-51317

CVE-2024-51317

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function

CVSS 6.5 · Medium · EPSS 0.4%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • netsurf Debian:12

    Versions
    • 3.10-1
    • 3.10-2
    • 3.10-3
    • 3.10-3.1
    • 3.11-1
    • 3.11-2
    • 3.11-3
    • 3.11-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Debian:13

    Versions
    • 3.11-2
    • 3.11-3
    • 3.11-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Debian:14

    Versions
    • 3.11-2
    • 3.11-3
    • 3.11-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Ubuntu:16.04:LTS

    Versions
    • 3.2+dfsg-2.2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Ubuntu:20.04:LTS

    Versions
    • 3.6-3.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Ubuntu:22.04:LTS

    Versions
    • 3.10-1
    • 3.10-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Ubuntu:24.04:LTS

    Versions
    • 3.10-3.1
    • 3.11-1
    • 3.11-1build4
    • 3.11-1build5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Ubuntu:25.10

    Versions
    • 3.11-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Ubuntu:26.10

    Versions
    • 3.11-3
    • 3.11-4
    • 3.11-4ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netsurf Ubuntu:26.04:LTS

    Versions
    • 3.11-2
    • 3.11-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →