pkg:Debian/wget

All known vulnerabilities

• CRITICAL9.8CVE-2019-5953wget - security update
  from 0, < 1.20.1-1.1
• CRITICAL9.8CVE-2019-5953wget - security update
  from 0, < 1.16-1+deb8u6
• CRITICAL9.8CVE-2019-5953wget - security update
  from 0, < 1.18-5+deb9u3
• CRITICAL9.1wget - security update
  from 0, < 1.21-1+deb11u2
• CRITICAL9.1wget - security update
  from 0, < 1.21-1+deb11u2
• HIGH8.8The retr.c:fd_read_body() function is called when processing OK responses.
  from 0, < 1.19.2-1
• HIGH8.8wget - security update
  from 0, < 1.19.2-1
• HIGH8.8wget - security update
  from 0, < 1.13.4-3+deb7u5
• HIGH8.8wget - security update
  from 0, < 1.16-1+deb8u4
• HIGH8.8wget - security update
  from 0, < 1.18-1
• HIGH8.8wget - security update
  from 0, < 1.13.4-3+deb7u3
• HIGH8.1wget - security update
  from 0, < 1.18-4
• HIGH8.1wget - security update
  from 0, < 1.16-1+deb8u7
• HIGH7.8set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the exte…
  from 0, < 1.20.1-1
• HIGH7.1GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/…
  from 0
• HIGH7.1GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/…
  from 0
• MEDIUM6.5Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable.
  from 0
• MEDIUM6.5wget - security update
  from 0, < 1.19.5-1
• MEDIUM6.5wget - security update
  from 0, < 1.13.4-3+deb7u6
• MEDIUM6.5wget - security update
  from 0, < 1.16-1+deb8u5
• MEDIUM6.1GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
  from 0
• MEDIUM6.1wget - security update
  from 0, < 1.19.1-2
• MEDIUM6.1wget - security update
  from 0, < 1.13.4-3+deb7u4
• MEDIUM5.9GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode.
  from 0
• —GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within s…
  from 0
• —GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function wi…
  from 0
• —wget - security update
  from 0, < 1.16-1
• —wget - security update
  from 0, < 1.12-2.1+deb6u1
• —wget - security update
  from 0, < 1.13.4-3+deb7u2
• —wget - potential code execution
  from 0, < 1.12-2.1
• —wget - potential code execution
  from 0, < 1.11.4-2+lenny2
• —wget - SSL certificate verification weakness
  from 0, < 1.12-1
• —wget - SSL certificate verification weakness
  from 0, < 1.10.2-2+etch1
• —The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service…
  from 0, < 1.13-1
• —curl - buffer overflow
  from 0, < 1.10.2-1
• —wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves…
  from 0, < 1.9.1-11
• —wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote mal…
  from 0, < 1.9.1-11
• —Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
  from 0, < 1.9.1-12
• —Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly exe…
  from 0, < 1.8.2-8
• —wget - directory traversal
  from 0, < 1.8.2-8
• —wget - directory traversal
  from 0, < 1.8.1-6.1