p PatchFirst

CVE-2016-7098

CVE-2016-7098

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.

CVSS 8.1 · High · EPSS 7.5% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • wget Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.18-4

    Update to 1.18-4

  • wget Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.18-4

    Update to 1.18-4

  • wget Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.18-4

    Update to 1.18-4

  • wget Ubuntu:14.04:LTS

    Versions
    • 1.14-2ubuntu1
    • 1.14-5ubuntu1
    • 1.15-1ubuntu1
    • 1.15-1ubuntu1.14.04.1
    • 1.15-1ubuntu1.14.04.2
    Affected ranges
    • ECOSYSTEM: < 1.15-1ubuntu1.14.04.3

    Update to 1.15-1ubuntu1.14.04.3

  • wget Ubuntu:16.04:LTS

    Versions
    • 1.16.1-1ubuntu1
    • 1.17.1-1ubuntu1
    • 1.17.1-1ubuntu1.1
    • 1.17.1-1ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 1.17.1-1ubuntu1.3

    Update to 1.17.1-1ubuntu1.3

Original sources

Check your server →