Lucene search

CVE-2017-13089 GNU Wget: stack overflow in HTTP protocol handling

🗓️ 27 Oct 2017 19:00:00Reported by certccType

CVE-2017-13089 GNU Wget: stack overflow in HTTP protocol handling. The http.c:skip_short_body() function in wget before 1.19.2 allows remote attackers to have an unspecified impact via a crafted response

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 94
CVE	CVE-2017-13089	27 Oct 201719:29	–	cve
AlpineLinux	CVE-2017-13089	27 Oct 201719:29	–	alpinelinux
RedhatCVE	CVE-2017-13089	26 Oct 201716:19	–	redhatcve
seebug.org	wget HTTP integer overflow(CVE-2017-13089)	13 Nov 201700:00	–	seebug
Veracode	Arbitrary Code Execution	15 Jan 201909:20	–	veracode
0day.today	Wget HTTP integer overflow Exploit	27 Nov 201700:00	–	zdt
Tenable Nessus	FreeBSD : wget -- Stack overflow in HTTP protocol handling (09849e71-bb12-11e7-8357-3065ec6f3643)	30 Oct 201700:00	–	nessus
Tenable Nessus	Debian DLA-1149-1 : wget security update	30 Oct 201700:00	–	nessus
Tenable Nessus	Photon OS 1.0: Wget PHSA-2017-0047 (deprecated)	17 Aug 201800:00	–	nessus
Tenable Nessus	Photon OS 1.0: Wget PHSA-2017-0047	7 Feb 201900:00	–	nessus

[
  {
    "platforms": [
      "any"
    ],
    "product": "Wget",
    "vendor": "GNU Project",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 1.19.2"
      }
    ]
  }
]

Source	Link
synology	www.synology.com/support/security/Synology_SA_17_62_Wget
securitytracker	www.securitytracker.com/id/1039661
viestintavirasto	www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html
access	www.access.redhat.com/errata/RHSA-2017:3075
debian	www.debian.org/security/2017/dsa-4008
git	www.git.savannah.gnu.org/cgit/wget.git/commit/
security	www.security.gentoo.org/glsa/201711-06
github	www.github.com/r1b/CVE-2017-13089
securityfocus	www.securityfocus.com/bid/101592

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2017 19:00Current

8.5High risk

Vulners AI Score8.5

CVSS38.8

EPSS0.7009

CWE-121