Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade wget | Jan 31, 2020 | Sep 26, 2016 |
| Freebsd | — | Upgrade wget | Nov 30, 2016 | Nov 30, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade wget | Nov 30, 2017 | Sep 26, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade wget | Apr 2, 2019 | Sep 26, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade wget | May 7, 2019 | Sep 26, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade wget | Apr 3, 2019 | Sep 26, 2016 |
| Suse | — | Upgrade wgetUpgrade wget-openssl1 | Sep 27, 2016 | Sep 23, 2016 |
| Ubuntu | — | Upgrade wget | Oct 26, 2017 | Sep 26, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub