Skip to content
OpenAdvisories
High USN-3464-1 4 CVEs

wget vulnerabilities

Published Oct 26, 2017 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Antti Levomäki, Christian Jalio, and Joonas Pihlaja discovered that Wget
incorrectly handled certain HTTP responses. A remote attacker could use
this issue to cause Wget to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2017-13089, CVE-2017-13090)

Dawid Golunski discovered that Wget incorrectly handled recursive or
mirroring mode. A remote attacker could possibly use this issue to bypass
intended access list restrictions. (CVE-2016-7098)

Orange Tsai discovered that Wget incorrectly handled CRLF sequences in
HTTP headers. A remote attacker could possibly use this issue to inject
arbitrary HTTP headers. (CVE-2017-6508)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS wget 1.15-1ubuntu1.14.04.3
Ubuntu · 16.04 LTS 16.04:LTS wget 1.17.1-1ubuntu1.3

Vulnerabilities 4

  • High 8.8
    CVE-2017-13089 Public exploit EPSS 80%

    GNU Wget: stack overflow in HTTP protocol handling

    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…

    GNU wget wget wget Debian Ubuntu Alpine
  • High 8.8
    CVE-2017-13090 EPSS 37%

    GNU Wget: heap overflow in HTTP protocol handling

    The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. T…

    GNU wget wget wget Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7098 Public exploit

    Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allo…

    wget wget Debian Ubuntu
  • Unscored —
    CVE-2017-6508

    CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to injec…

    wget wget wget Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2016-7098
  • report
    https://ubuntu.com/security/CVE-2017-6508
  • report
    https://ubuntu.com/security/CVE-2017-13089
  • report
    https://ubuntu.com/security/CVE-2017-13090