CRITICAL🇵🇱 Wersja polska

CVE-2019-5953

CVSS 9.8v3.0pub. 2019-05-17upd. 2024-11-21

Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Gnu Wget

    APP
    Gnu
    ≤ 1.20.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2024-38428CRITICAL9.1PL ✓same product

GNU Wget — błędna interpretacja średnika w sekcji userinfo URI

CVE-2026-58469HIGH8.7PL ✓same product

GNU Wget: heap buffer underread w przetwarzaniu URL w plikach Metalink

CVE-2018-20483HIGH7.8same product

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url m...

CVE-2017-13090HIGH8.8same product

The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked i...

CVE-2017-13089HIGH8.8same product

The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When...