Skip to content
OpenAdvisories

Vendor

GNU Project

9 known vulnerabilities.

Products

GNU GRUB 4 Wget 2 GNU libbmicrohttpd 2 UnRTF 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2017-13089 Public exploit EPSS 80%

    GNU Wget: stack overflow in HTTP protocol handling

    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…

    GNU Project Wget wget wget Debian Ubuntu Alpine