Skip to content
OpenAdvisories

Package · Ubuntu

wget

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2018-0494 Public exploit EPSS 16%

    GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n seque…

    wget wget wget Debian Ubuntu Alpine
  • High 8.8
    CVE-2017-13089 Public exploit EPSS 80%

    GNU Wget: stack overflow in HTTP protocol handling

    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…

    GNU Project Wget wget wget Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7098 Public exploit

    Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allo…

    wget wget Debian Ubuntu
  • Unscored —
    CVE-2016-4971 Public exploit EPSS 46%

    GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted …

    wget wget wget Debian Ubuntu Alpine
  • Unscored —
    CVE-2014-4877 Public exploit EPSS 40%

    Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to …

    wget wget Debian Ubuntu