Skip to content
OpenAdvisories

Package · Alpine

wget

8 known vulnerabilities.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2018-0494 Public exploit EPSS 16%

    GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n seque…

  • High 8.8
    CVE-2017-13089 Public exploit EPSS 80%

    GNU Wget: stack overflow in HTTP protocol handling

    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…

  • Unscored —
    CVE-2016-4971 Public exploit EPSS 46%

    GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted …