CRITICAL🇬🇧 English

CVE-2019-5953

CVSS 9.8v3.0pub. 2019-05-17upd. 2024-11-21

Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Gnu Wget

    APP
    Gnu
    ≤ 1.20.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2024-38428CRITICAL9.1PL ✓ten sam produkt

GNU Wget — błędna interpretacja średnika w sekcji userinfo URI

CVE-2018-20483HIGH7.8ten sam produkt

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url m...

CVE-2017-13090HIGH8.8ten sam produkt

The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked i...

CVE-2017-13089HIGH8.8ten sam produkt

The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When...

CVE-2016-7098HIGH8.1ten sam produkt

Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, m...