Medium ELSA-2014-1764 1 CVE

Moderate: wget security update (Oracle Linux 7)

Published Oct 30, 2014 · Updated Oct 30, 2014

Ecosystem: Oracle Linux

Summary

[1.14-10.1]
- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156135)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	wget	0:1.14-10.el7_0.1

Vulnerabilities 1

Unscored —

CVE-2014-4877 Public exploit EPSS 40%

Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to …

wget wget Debian Ubuntu

Oct 29, 2014