Skip to content
OpenAdvisories

Product · GNU Project

Wget

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2017-13089 Public exploit EPSS 80%

    GNU Wget: stack overflow in HTTP protocol handling

    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…

    GNU Project Wget wget wget Debian Ubuntu Alpine
  • High 8.8
    CVE-2017-13090 EPSS 37%

    GNU Wget: heap overflow in HTTP protocol handling

    The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. T…

    GNU Project Wget wget wget Debian Ubuntu Alpine