Unrated
GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.
CVE-2018-0494
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2018-0494 wget Fixed in: 1.19.5-r0
- Debian DEBIAN-CVE-2018-0494 wget Fixed in: 1.19.5-1
References
- advisory securityfocus.com
- advisory securitytracker.com
- advisory access.redhat.com
- advisory git.savannah.gnu.org
- advisory lists.debian.org
- advisory security.gentoo.org
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory debian.org
- patch lists.gnu.org
- report sintonen.fi
- report exploit-db.com
- web savannah.gnu.org