csaf_opensuse - opensuse-su-2024:11510-1

Vulnerability from csaf_opensuse

Published

2024-06-15 00:00

Modified

2024-06-15 00:00

Summary

wget-1.21.1-2.2 on GA media

Notes

Title of the patch

wget-1.21.1-2.2 on GA media

Description of the patch

These are all security issues fixed in the wget-1.21.1-2.2 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-11510

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "wget-1.21.1-2.2 on GA media",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "These are all security issues fixed in the wget-1.21.1-2.2 package on the GA media of openSUSE Tumbleweed.",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "openSUSE-Tumbleweed-2024-11510",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11510-1.json",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2006-6719 page",
            url: "https://www.suse.com/security/cve/CVE-2006-6719/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13089 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13089/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13090 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13090/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-6508 page",
            url: "https://www.suse.com/security/cve/CVE-2017-6508/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-0494 page",
            url: "https://www.suse.com/security/cve/CVE-2018-0494/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-20483 page",
            url: "https://www.suse.com/security/cve/CVE-2018-20483/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-5953 page",
            url: "https://www.suse.com/security/cve/CVE-2019-5953/",
         },
      ],
      title: "wget-1.21.1-2.2 on GA media",
      tracking: {
         current_release_date: "2024-06-15T00:00:00Z",
         generator: {
            date: "2024-06-15T00:00:00Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "openSUSE-SU-2024:11510-1",
         initial_release_date: "2024-06-15T00:00:00Z",
         revision_history: [
            {
               date: "2024-06-15T00:00:00Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wget-1.21.1-2.2.aarch64",
                        product: {
                           name: "wget-1.21.1-2.2.aarch64",
                           product_id: "wget-1.21.1-2.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wget-lang-1.21.1-2.2.aarch64",
                        product: {
                           name: "wget-lang-1.21.1-2.2.aarch64",
                           product_id: "wget-lang-1.21.1-2.2.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wget-1.21.1-2.2.ppc64le",
                        product: {
                           name: "wget-1.21.1-2.2.ppc64le",
                           product_id: "wget-1.21.1-2.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wget-lang-1.21.1-2.2.ppc64le",
                        product: {
                           name: "wget-lang-1.21.1-2.2.ppc64le",
                           product_id: "wget-lang-1.21.1-2.2.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wget-1.21.1-2.2.s390x",
                        product: {
                           name: "wget-1.21.1-2.2.s390x",
                           product_id: "wget-1.21.1-2.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wget-lang-1.21.1-2.2.s390x",
                        product: {
                           name: "wget-lang-1.21.1-2.2.s390x",
                           product_id: "wget-lang-1.21.1-2.2.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "wget-1.21.1-2.2.x86_64",
                        product: {
                           name: "wget-1.21.1-2.2.x86_64",
                           product_id: "wget-1.21.1-2.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wget-lang-1.21.1-2.2.x86_64",
                        product: {
                           name: "wget-lang-1.21.1-2.2.x86_64",
                           product_id: "wget-lang-1.21.1-2.2.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "openSUSE Tumbleweed",
                        product: {
                           name: "openSUSE Tumbleweed",
                           product_id: "openSUSE Tumbleweed",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:tumbleweed",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "wget-1.21.1-2.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
            },
            product_reference: "wget-1.21.1-2.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wget-1.21.1-2.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
            },
            product_reference: "wget-1.21.1-2.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wget-1.21.1-2.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
            },
            product_reference: "wget-1.21.1-2.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wget-1.21.1-2.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
            },
            product_reference: "wget-1.21.1-2.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wget-lang-1.21.1-2.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
            },
            product_reference: "wget-lang-1.21.1-2.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wget-lang-1.21.1-2.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
            },
            product_reference: "wget-lang-1.21.1-2.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wget-lang-1.21.1-2.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
            },
            product_reference: "wget-lang-1.21.1-2.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wget-lang-1.21.1-2.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
            },
            product_reference: "wget-lang-1.21.1-2.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2006-6719",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2006-6719",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2006-6719",
               url: "https://www.suse.com/security/cve/CVE-2006-6719",
            },
            {
               category: "external",
               summary: "SUSE Bug 231063 for CVE-2006-6719",
               url: "https://bugzilla.suse.com/231063",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2006-6719",
      },
      {
         cve: "CVE-2017-13089",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13089",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13089",
               url: "https://www.suse.com/security/cve/CVE-2017-13089",
            },
            {
               category: "external",
               summary: "SUSE Bug 1064715 for CVE-2017-13089",
               url: "https://bugzilla.suse.com/1064715",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2017-13089",
      },
      {
         cve: "CVE-2017-13090",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13090",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13090",
               url: "https://www.suse.com/security/cve/CVE-2017-13090",
            },
            {
               category: "external",
               summary: "SUSE Bug 1064716 for CVE-2017-13090",
               url: "https://bugzilla.suse.com/1064716",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2017-13090",
      },
      {
         cve: "CVE-2017-6508",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-6508",
            },
         ],
         notes: [
            {
               category: "general",
               text: "CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-6508",
               url: "https://www.suse.com/security/cve/CVE-2017-6508",
            },
            {
               category: "external",
               summary: "SUSE Bug 1028301 for CVE-2017-6508",
               url: "https://bugzilla.suse.com/1028301",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159418 for CVE-2017-6508",
               url: "https://bugzilla.suse.com/1159418",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-6508",
      },
      {
         cve: "CVE-2018-0494",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-0494",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \\r\\n sequence in a continuation line.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-0494",
               url: "https://www.suse.com/security/cve/CVE-2018-0494",
            },
            {
               category: "external",
               summary: "SUSE Bug 1092061 for CVE-2018-0494",
               url: "https://bugzilla.suse.com/1092061",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123797 for CVE-2018-0494",
               url: "https://bugzilla.suse.com/1123797",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159418 for CVE-2018-0494",
               url: "https://bugzilla.suse.com/1159418",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-0494",
      },
      {
         cve: "CVE-2018-20483",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-20483",
            },
         ],
         notes: [
            {
               category: "general",
               text: "set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-20483",
               url: "https://www.suse.com/security/cve/CVE-2018-20483",
            },
            {
               category: "external",
               summary: "SUSE Bug 1120382 for CVE-2018-20483",
               url: "https://bugzilla.suse.com/1120382",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-20483",
      },
      {
         cve: "CVE-2019-5953",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-5953",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
               "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-5953",
               url: "https://www.suse.com/security/cve/CVE-2019-5953",
            },
            {
               category: "external",
               summary: "SUSE Bug 1131493 for CVE-2019-5953",
               url: "https://bugzilla.suse.com/1131493",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-1.21.1-2.2.x86_64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.aarch64",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.ppc64le",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.s390x",
                  "openSUSE Tumbleweed:wget-lang-1.21.1-2.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2019-5953",
      },
   ],
}

cve-2018-20483

Vulnerability from cvelistv5

Published

2018-12-26 18:00

Modified

2024-08-05 12:05

Severity ?

Summary

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201903-08	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/106358	vdb-entry, x_refsource_BID
	https://twitter.com/marcan42/status/1077676739877232640	x_refsource_MISC
	http://git.savannah.gnu.org/cgit/wget.git/tree/NEWS	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20190321-0002/	x_refsource_CONFIRM
	https://usn.ubuntu.com/3943-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2019:3701	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T12:05:16.988Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201903-08",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201903-08",
               },
               {
                  name: "106358",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/106358",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://twitter.com/marcan42/status/1077676739877232640",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://git.savannah.gnu.org/cgit/wget.git/tree/NEWS",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190321-0002/",
               },
               {
                  name: "USN-3943-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3943-1/",
               },
               {
                  name: "RHSA-2019:3701",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3701",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-12-26T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-11-06T00:08:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201903-08",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201903-08",
            },
            {
               name: "106358",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/106358",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://twitter.com/marcan42/status/1077676739877232640",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://git.savannah.gnu.org/cgit/wget.git/tree/NEWS",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190321-0002/",
            },
            {
               name: "USN-3943-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3943-1/",
            },
            {
               name: "RHSA-2019:3701",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3701",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-20483",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201903-08",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201903-08",
                  },
                  {
                     name: "106358",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/106358",
                  },
                  {
                     name: "https://twitter.com/marcan42/status/1077676739877232640",
                     refsource: "MISC",
                     url: "https://twitter.com/marcan42/status/1077676739877232640",
                  },
                  {
                     name: "http://git.savannah.gnu.org/cgit/wget.git/tree/NEWS",
                     refsource: "MISC",
                     url: "http://git.savannah.gnu.org/cgit/wget.git/tree/NEWS",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190321-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190321-0002/",
                  },
                  {
                     name: "USN-3943-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3943-1/",
                  },
                  {
                     name: "RHSA-2019:3701",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3701",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-20483",
      datePublished: "2018-12-26T18:00:00",
      dateReserved: "2018-12-26T00:00:00",
      dateUpdated: "2024-08-05T12:05:16.988Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-5953

Vulnerability from cvelistv5

Published

2019-05-17 15:25

Modified

2024-08-04 20:09

Severity ?

Summary

Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.

References

▼	URL	Tags
	https://www.gnu.org/software/wget/	x_refsource_MISC
	http://jvn.jp/en/jp/JVN25261088/index.html	x_refsource_MISC
	https://support.f5.com/csp/article/K14560101	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201908-19	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2019:2979	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3168	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	The GNU Projec	GNU Wget	Version: 1.20.1 and earlier

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T20:09:23.991Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.gnu.org/software/wget/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://jvn.jp/en/jp/JVN25261088/index.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.f5.com/csp/article/K14560101",
               },
               {
                  name: "GLSA-201908-19",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201908-19",
               },
               {
                  name: "RHSA-2019:2979",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2979",
               },
               {
                  name: "RHSA-2019:3168",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3168",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "GNU Wget",
               vendor: "The GNU Projec",
               versions: [
                  {
                     status: "affected",
                     version: "1.20.1 and earlier",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Buffer Overflow",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-10-24T22:06:32",
            orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce",
            shortName: "jpcert",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.gnu.org/software/wget/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://jvn.jp/en/jp/JVN25261088/index.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.f5.com/csp/article/K14560101",
            },
            {
               name: "GLSA-201908-19",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201908-19",
            },
            {
               name: "RHSA-2019:2979",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2979",
            },
            {
               name: "RHSA-2019:3168",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3168",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "vultures@jpcert.or.jp",
               ID: "CVE-2019-5953",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "GNU Wget",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "1.20.1 and earlier",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "The GNU Projec",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Buffer Overflow",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.gnu.org/software/wget/",
                     refsource: "MISC",
                     url: "https://www.gnu.org/software/wget/",
                  },
                  {
                     name: "http://jvn.jp/en/jp/JVN25261088/index.html",
                     refsource: "MISC",
                     url: "http://jvn.jp/en/jp/JVN25261088/index.html",
                  },
                  {
                     name: "https://support.f5.com/csp/article/K14560101",
                     refsource: "CONFIRM",
                     url: "https://support.f5.com/csp/article/K14560101",
                  },
                  {
                     name: "GLSA-201908-19",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201908-19",
                  },
                  {
                     name: "RHSA-2019:2979",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2979",
                  },
                  {
                     name: "RHSA-2019:3168",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3168",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce",
      assignerShortName: "jpcert",
      cveId: "CVE-2019-5953",
      datePublished: "2019-05-17T15:25:56",
      dateReserved: "2019-01-10T00:00:00",
      dateUpdated: "2024-08-04T20:09:23.991Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-0494

Vulnerability from cvelistv5

Published

2018-05-06 22:00

Modified

2024-08-05 03:28

Severity ?

Summary

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

References

▼	URL	Tags
	https://sintonen.fi/advisories/gnu-wget-cookie-injection.txt	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:3052	vendor-advisory, x_refsource_REDHAT
	https://savannah.gnu.org/bugs/?53763	x_refsource_MISC
	https://git.savannah.gnu.org/cgit/wget.git/commit/?id=1fc9c95ec144499e69dc8ec76dbe07799d7d82cd	x_refsource_MISC
	https://security.gentoo.org/glsa/201806-01	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4195	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/104129	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1040838	vdb-entry, x_refsource_SECTRACK
	https://www.exploit-db.com/exploits/44601/	exploit, x_refsource_EXPLOIT-DB
	https://usn.ubuntu.com/3643-2/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/05/msg00006.html	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/bug-wget/2018-05/msg00020.html	x_refsource_MISC
	https://usn.ubuntu.com/3643-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	WGet	Version: WGet

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T03:28:10.610Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://sintonen.fi/advisories/gnu-wget-cookie-injection.txt",
               },
               {
                  name: "RHSA-2018:3052",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3052",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://savannah.gnu.org/bugs/?53763",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=1fc9c95ec144499e69dc8ec76dbe07799d7d82cd",
               },
               {
                  name: "GLSA-201806-01",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201806-01",
               },
               {
                  name: "DSA-4195",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4195",
               },
               {
                  name: "104129",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/104129",
               },
               {
                  name: "1040838",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1040838",
               },
               {
                  name: "44601",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/44601/",
               },
               {
                  name: "USN-3643-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3643-2/",
               },
               {
                  name: "[debian-lts-announce] 20180511 [SECURITY] [DLA 1375-1] wget security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/05/msg00006.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.gnu.org/archive/html/bug-wget/2018-05/msg00020.html",
               },
               {
                  name: "USN-3643-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3643-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "WGet",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "WGet",
                  },
               ],
            },
         ],
         datePublic: "2018-05-06T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \\r\\n sequence in a continuation line.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "cookie injection",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "79363d38-fa19-49d1-9214-5f28da3f3ac5",
            shortName: "debian",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://sintonen.fi/advisories/gnu-wget-cookie-injection.txt",
            },
            {
               name: "RHSA-2018:3052",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3052",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://savannah.gnu.org/bugs/?53763",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=1fc9c95ec144499e69dc8ec76dbe07799d7d82cd",
            },
            {
               name: "GLSA-201806-01",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201806-01",
            },
            {
               name: "DSA-4195",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4195",
            },
            {
               name: "104129",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/104129",
            },
            {
               name: "1040838",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1040838",
            },
            {
               name: "44601",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/44601/",
            },
            {
               name: "USN-3643-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3643-2/",
            },
            {
               name: "[debian-lts-announce] 20180511 [SECURITY] [DLA 1375-1] wget security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/05/msg00006.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.gnu.org/archive/html/bug-wget/2018-05/msg00020.html",
            },
            {
               name: "USN-3643-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3643-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@debian.org",
               ID: "CVE-2018-0494",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "WGet",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "WGet",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \\r\\n sequence in a continuation line.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "cookie injection",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://sintonen.fi/advisories/gnu-wget-cookie-injection.txt",
                     refsource: "MISC",
                     url: "https://sintonen.fi/advisories/gnu-wget-cookie-injection.txt",
                  },
                  {
                     name: "RHSA-2018:3052",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3052",
                  },
                  {
                     name: "https://savannah.gnu.org/bugs/?53763",
                     refsource: "MISC",
                     url: "https://savannah.gnu.org/bugs/?53763",
                  },
                  {
                     name: "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=1fc9c95ec144499e69dc8ec76dbe07799d7d82cd",
                     refsource: "MISC",
                     url: "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=1fc9c95ec144499e69dc8ec76dbe07799d7d82cd",
                  },
                  {
                     name: "GLSA-201806-01",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201806-01",
                  },
                  {
                     name: "DSA-4195",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4195",
                  },
                  {
                     name: "104129",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/104129",
                  },
                  {
                     name: "1040838",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1040838",
                  },
                  {
                     name: "44601",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/44601/",
                  },
                  {
                     name: "USN-3643-2",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3643-2/",
                  },
                  {
                     name: "[debian-lts-announce] 20180511 [SECURITY] [DLA 1375-1] wget security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/05/msg00006.html",
                  },
                  {
                     name: "https://lists.gnu.org/archive/html/bug-wget/2018-05/msg00020.html",
                     refsource: "MISC",
                     url: "https://lists.gnu.org/archive/html/bug-wget/2018-05/msg00020.html",
                  },
                  {
                     name: "USN-3643-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3643-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "79363d38-fa19-49d1-9214-5f28da3f3ac5",
      assignerShortName: "debian",
      cveId: "CVE-2018-0494",
      datePublished: "2018-05-06T22:00:00",
      dateReserved: "2017-11-27T00:00:00",
      dateUpdated: "2024-08-05T03:28:10.610Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-6508

Vulnerability from cvelistv5

Published

2017-03-07 08:39

Modified

2024-08-05 15:33

Severity ?

Summary

CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.

References

▼	URL	Tags
	http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html	x_refsource_MISC
	https://security.gentoo.org/glsa/201706-16	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/96877	vdb-entry, x_refsource_BID
	http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:33:20.455Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html",
               },
               {
                  name: "GLSA-201706-16",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201706-16",
               },
               {
                  name: "96877",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96877",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-03-07T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-06-30T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html",
            },
            {
               name: "GLSA-201706-16",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201706-16",
            },
            {
               name: "96877",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96877",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-6508",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html",
                     refsource: "MISC",
                     url: "http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html",
                  },
                  {
                     name: "GLSA-201706-16",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201706-16",
                  },
                  {
                     name: "96877",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96877",
                  },
                  {
                     name: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4",
                     refsource: "CONFIRM",
                     url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-6508",
      datePublished: "2017-03-07T08:39:00",
      dateReserved: "2017-03-07T00:00:00",
      dateUpdated: "2024-08-05T15:33:20.455Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2006-6719

Vulnerability from cvelistv5

Published

2006-12-23 11:00

Modified

2024-08-07 20:33

Severity ?

Summary

The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.

References

▼	URL	Tags
	https://issues.rpath.com/browse/RPL-930	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/21650	vdb-entry, x_refsource_BID
	https://www.exploit-db.com/exploits/2947	exploit, x_refsource_EXPLOIT-DB
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:017	vendor-advisory, x_refsource_MANDRIVA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-07T20:33:59.979Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://issues.rpath.com/browse/RPL-930",
               },
               {
                  name: "21650",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/21650",
               },
               {
                  name: "2947",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/2947",
               },
               {
                  name: "MDKSA-2007:017",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDKSA-2007:017",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2006-12-18T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-10-18T14:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://issues.rpath.com/browse/RPL-930",
            },
            {
               name: "21650",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/21650",
            },
            {
               name: "2947",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/2947",
            },
            {
               name: "MDKSA-2007:017",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDKSA-2007:017",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2006-6719",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://issues.rpath.com/browse/RPL-930",
                     refsource: "CONFIRM",
                     url: "https://issues.rpath.com/browse/RPL-930",
                  },
                  {
                     name: "21650",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/21650",
                  },
                  {
                     name: "2947",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/2947",
                  },
                  {
                     name: "MDKSA-2007:017",
                     refsource: "MANDRIVA",
                     url: "http://www.mandriva.com/security/advisories?name=MDKSA-2007:017",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2006-6719",
      datePublished: "2006-12-23T11:00:00",
      dateReserved: "2006-12-22T00:00:00",
      dateUpdated: "2024-08-07T20:33:59.979Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13090

Vulnerability from cvelistv5

Published

2017-10-27 19:00

Modified

2024-09-16 18:23

Severity ?

8.8 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.

References

▼	URL	Tags
	https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html	x_refsource_MISC
	http://www.securityfocus.com/bid/101590	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201711-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-4008	vendor-advisory, x_refsource_DEBIAN
	https://www.synology.com/support/security/Synology_SA_17_62_Wget	x_refsource_CONFIRM
	http://git.savannah.gnu.org/cgit/wget.git/commit/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039661	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:3075	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	GNU Project	Wget	Version: prior to 1.19.2

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.303Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
               },
               {
                  name: "101590",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/101590",
               },
               {
                  name: "GLSA-201711-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201711-06",
               },
               {
                  name: "DSA-4008",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-4008",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba",
               },
               {
                  name: "1039661",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039661",
               },
               {
                  name: "RHSA-2017:3075",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:3075",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "any",
               ],
               product: "Wget",
               vendor: "GNU Project",
               versions: [
                  {
                     status: "affected",
                     version: "prior to 1.19.2",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Antti Levomäki, Christian Jalio, Joonas Pihlaja from Forcepoint",
            },
         ],
         datePublic: "2017-10-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-122",
                     description: "CWE-122: Heap-based Buffer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-12-29T13:57:02",
            orgId: "37e5125f-f79b-445b-8fad-9564f167944b",
            shortName: "certcc",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
            },
            {
               name: "101590",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/101590",
            },
            {
               name: "GLSA-201711-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201711-06",
            },
            {
               name: "DSA-4008",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-4008",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba",
            },
            {
               name: "1039661",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039661",
            },
            {
               name: "RHSA-2017:3075",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:3075",
            },
         ],
         title: "GNU Wget: heap overflow in HTTP protocol handling",
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cert@cert.org",
               DATE_PUBLIC: "2017-10-27T15:00:00.000Z",
               ID: "CVE-2017-13090",
               STATE: "PUBLIC",
               TITLE: "GNU Wget: heap overflow in HTTP protocol handling",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Wget",
                                 version: {
                                    version_data: [
                                       {
                                          platform: "any",
                                          version_value: "prior to 1.19.2",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "GNU Project",
                     },
                  ],
               },
            },
            credit: [
               "Antti Levomäki, Christian Jalio, Joonas Pihlaja from Forcepoint",
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.",
                  },
               ],
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-122: Heap-based Buffer Overflow",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
                     refsource: "MISC",
                     url: "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
                  },
                  {
                     name: "101590",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/101590",
                  },
                  {
                     name: "GLSA-201711-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201711-06",
                  },
                  {
                     name: "DSA-4008",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-4008",
                  },
                  {
                     name: "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
                     refsource: "CONFIRM",
                     url: "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
                  },
                  {
                     name: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba",
                     refsource: "CONFIRM",
                     url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba",
                  },
                  {
                     name: "1039661",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039661",
                  },
                  {
                     name: "RHSA-2017:3075",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:3075",
                  },
               ],
            },
            solution: "Patch to Wget 1.19.2 or equivalent version from your operating system distribution.",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "37e5125f-f79b-445b-8fad-9564f167944b",
      assignerShortName: "certcc",
      cveId: "CVE-2017-13090",
      datePublished: "2017-10-27T19:00:00Z",
      dateReserved: "2017-08-22T00:00:00",
      dateUpdated: "2024-09-16T18:23:48.006Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13089

Vulnerability from cvelistv5

Published

2017-10-27 19:00

Modified

2024-09-17 01:15

Severity ?

8.8 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.

References

▼	URL	Tags
	https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html	x_refsource_MISC
	https://security.gentoo.org/glsa/201711-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-4008	vendor-advisory, x_refsource_DEBIAN
	https://www.synology.com/support/security/Synology_SA_17_62_Wget	x_refsource_CONFIRM
	http://git.savannah.gnu.org/cgit/wget.git/commit/?id=d892291fb8ace4c3b734ea5125770989c215df3f	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/101592	vdb-entry, x_refsource_BID
	https://github.com/r1b/CVE-2017-13089	x_refsource_MISC
	http://www.securitytracker.com/id/1039661	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:3075	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	GNU Project	Wget	Version: prior to 1.19.2

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.341Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
               },
               {
                  name: "GLSA-201711-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201711-06",
               },
               {
                  name: "DSA-4008",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-4008",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=d892291fb8ace4c3b734ea5125770989c215df3f",
               },
               {
                  name: "101592",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/101592",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/r1b/CVE-2017-13089",
               },
               {
                  name: "1039661",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039661",
               },
               {
                  name: "RHSA-2017:3075",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:3075",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "any",
               ],
               product: "Wget",
               vendor: "GNU Project",
               versions: [
                  {
                     status: "affected",
                     version: "prior to 1.19.2",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Antti Levomäki, Christian Jalio, Joonas Pihlaja from Forcepoint",
            },
         ],
         datePublic: "2017-10-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-121",
                     description: "CWE-121: Stack-based Buffer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-12-29T13:57:02",
            orgId: "37e5125f-f79b-445b-8fad-9564f167944b",
            shortName: "certcc",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
            },
            {
               name: "GLSA-201711-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201711-06",
            },
            {
               name: "DSA-4008",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-4008",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=d892291fb8ace4c3b734ea5125770989c215df3f",
            },
            {
               name: "101592",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/101592",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/r1b/CVE-2017-13089",
            },
            {
               name: "1039661",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039661",
            },
            {
               name: "RHSA-2017:3075",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:3075",
            },
         ],
         title: "GNU Wget: stack overflow in HTTP protocol handling",
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cert@cert.org",
               DATE_PUBLIC: "2017-10-27T15:00:00.000Z",
               ID: "CVE-2017-13089",
               STATE: "PUBLIC",
               TITLE: "GNU Wget: stack overflow in HTTP protocol handling",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Wget",
                                 version: {
                                    version_data: [
                                       {
                                          platform: "any",
                                          version_value: "prior to 1.19.2",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "GNU Project",
                     },
                  ],
               },
            },
            credit: [
               "Antti Levomäki, Christian Jalio, Joonas Pihlaja from Forcepoint",
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.",
                  },
               ],
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-121: Stack-based Buffer Overflow",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
                     refsource: "MISC",
                     url: "https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html",
                  },
                  {
                     name: "GLSA-201711-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201711-06",
                  },
                  {
                     name: "DSA-4008",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-4008",
                  },
                  {
                     name: "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
                     refsource: "CONFIRM",
                     url: "https://www.synology.com/support/security/Synology_SA_17_62_Wget",
                  },
                  {
                     name: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=d892291fb8ace4c3b734ea5125770989c215df3f",
                     refsource: "CONFIRM",
                     url: "http://git.savannah.gnu.org/cgit/wget.git/commit/?id=d892291fb8ace4c3b734ea5125770989c215df3f",
                  },
                  {
                     name: "101592",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/101592",
                  },
                  {
                     name: "https://github.com/r1b/CVE-2017-13089",
                     refsource: "MISC",
                     url: "https://github.com/r1b/CVE-2017-13089",
                  },
                  {
                     name: "1039661",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039661",
                  },
                  {
                     name: "RHSA-2017:3075",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:3075",
                  },
               ],
            },
            solution: "Patch to Wget 1.19.2 or equivalent version from your operating system distribution.",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "37e5125f-f79b-445b-8fad-9564f167944b",
      assignerShortName: "certcc",
      cveId: "CVE-2017-13089",
      datePublished: "2017-10-27T19:00:00Z",
      dateReserved: "2017-08-22T00:00:00",
      dateUpdated: "2024-09-17T01:15:49.128Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_opensuse

cve-2018-20483

Vulnerability from cvelistv5

cve-2019-5953

Vulnerability from cvelistv5

cve-2018-0494

Vulnerability from cvelistv5

cve-2017-6508

Vulnerability from cvelistv5

cve-2006-6719

Vulnerability from cvelistv5

cve-2017-13090

Vulnerability from cvelistv5

cve-2017-13089

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature