GHSA-FXF9-RXPJ-26GX vulnerabilities

Vulnerabilities for packages: wget...

Updated wget packages fix security vulnerabilities

Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Wget vulnerabilities (USN-8543-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8543-1 advisory. It was discovered that Wget mishandled semicolons in the userinfo subcomponent of...

USN-8543-1 wget vulnerabilities

It was discovered that Wget mishandled semicolons in the userinfo subcomponent of a URL. A remote attacker could possibly use this issue to trick a user into connecting to a different host than intended. This issue only affected Ubuntu 14.04 LTS. CVE-2024-38428 It was discovered that Wget...

USN-8543-1: Wget vulnerabilities

It was discovered that Wget mishandled semicolons in the userinfo subcomponent of a URL. A remote attacker could possibly use this issue to trick a user into connecting to a different host than intended. This issue only affected Ubuntu 14.04 LTS. CVE-2024-38428 It was discovered that Wget...

EulerOS 2.0 SP11 : wget (EulerOS-SA-2025-1382)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these...

EulerOS 2.0 SP12 : wget (EulerOS-SA-2025-1310)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these...

EulerOS Virtualization 2.12.1 : wget (EulerOS-SA-2024-2762)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior ...

EulerOS Virtualization 2.12.0 : wget (EulerOS-SA-2024-2780)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior ...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Wget vulnerabilities (USN-3943-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3943-1 advisory. It was discovered that Wget incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive...

USN-3464-1: Wget vulnerabilities | Cloud Foundry

USN-3464-1: Wget vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Antti Levomäki, Christian Jalio, and Joonas Pihlaja discovered that Wget incorrectly handled certain HTTP responses. A remote attacker could use this issue to cause Wget to crash,...

SUSE-SU-2017:2871-1 Security update for wget

This update for wget fixes the following security issues: - CVE-2017-13089,CVE-2017-13090: Missing checks for negative remainingchunksize in skipshortbody and fdreadbody could cause stack buffer overflows, which could have been exploited by malicious servers. bsc1064715,bsc1064716...

USN-3464-1 wget vulnerabilities

Antti Levomäki, Christian Jalio, and Joonas Pihlaja discovered that Wget incorrectly handled certain HTTP responses. A remote attacker could use this issue to cause Wget to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-13089, CVE-2017-13090 Dawid Golunski...

CVE-2004-1488

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code...

wget18x.txt

--LQksG6bCIzRHxTLp Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable ------------------------------------------------------------------------ Summary ------------------------------------------------------------------------ Product...

GNU WGet Multiple Remote Vulnerabilities

Binary data 2449.prm...

GNU Wget 1.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/11871/info Multiple remote vulnerabilities reportedly affect GNU wget. These issues are due to the application's failure to properly sanitize user-supplied input and to properly validate the presence of files before writing to them. The issues include: - ...

GNU Wget 1.x - Multiple Vulnerabilities

GNU Wget 1.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11871/info Multiple remote vulnerabilities reportedly affect GNU wget. These issues are due to the application's failure to properly sanitize user-supplied input and to properly validate the presence of files before...

Debian DSA-209-1 : wget - directory traversal

Two problems have been found in the wget package as distributed in Debian GNU/Linux : - Stefano Zacchiroli found a buffer overrun in the urlfilename function, which would make wget segfault on very long URLs - Steven M. Christey discovered that wget did not verify the FTP server response to a NLS...

[SECURITY] [DSA-209-1] two wget problems

------------------------------------------------------------------------ Debian Security Advisory DSA-209-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 12, 2002 - ------------------------------------------------------------------------ Package : wget Problem type...