CentOS Linux 8.4 [TuxCare] Security Update: wget Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1784035618)

The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784035618 advisory. - GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring functi...

AlmaLinux 9.6 [TuxCare] Security Update: wget Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785492652)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785492652 advisory. - GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP...

EulerOS Virtualization 2.10.1 : wget (EulerOS-SA-2026-3859)

According to the versions of the wget packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in...

EulerOS 2.0 SP10 : wget (EulerOS-SA-2026-3774)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c tha...

EulerOS Virtualization 2.12.0 : wget (EulerOS-SA-2026-3680)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within...

EulerOS Virtualization 2.12.1 : wget (EulerOS-SA-2026-3626)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: wget (UTSA-2026-106777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106777 advisory. GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote...

Oracle Linux 10 : ELSA-2026-62142-0: / wget (ELSA-2026-621420)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621420 advisory. - Fix CVE-2026-58471: buffer overflow in convertfname Resolves: RHEL-194518 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : ELSA-2026-62143-0: / wget (ELSA-2026-621430)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621430 advisory. - Fix CVE-2026-58471: buffer overflow in convertfname Tenable has extracted the preceding description block directly from the Oracle Linux security...

wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the convertfname function. This occurs when processing a server-supplied filename that requires character set conversion, leading to memory corruption due to incorrect buffer reallocation. This can...

wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the convertfname function. This occurs when processing a server-supplied filename that requires character set conversion, leading to memory corruption due to incorrect buffer reallocation. This can...

wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the convertfname function. This occurs when processing a server-supplied filename that requires character set conversion, leading to memory corruption due to incorrect buffer reallocation. This can...

wget security, bug fix, and enhancement update

1.24.5-8 - Resolves: RHEL-220498 - async unsafe code in signal handler context 1.24.5-7 - Fix CVE-2026-58471: buffer overflow in convertfname Resolves: RHEL-194518 1.24.5-6 - Fix integer and buffer overflow in htmlquotestring Resolves: RHEL-210625...

wget security, bug fix, and enhancement update

1.21.1-11 - Resolves: RHEL-220497 - async unsafe code in signal handler context 1.21.1-10 - Fix CVE-2026-58471: buffer overflow in convertfname - Resolves: RHEL-194521 1.21.1-9 - Resolves: RHEL-210636 - Fix integer+buffer overflow in htmlquotestring...

JLSEC-2026-1160 GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability...

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

SUSE CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

Linux Distros Unpatched Vulnerability : CVE-2026-58471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote...

DEBIAN-CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

CVE-2026-58471 GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...