set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wget | Jan 10, 2019 | Dec 26, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libcurl-develUpgrade libcurlUpgrade curl-debuginfoUpgrade curl | Apr 27, 2020 | Dec 26, 2018 |
| Amazon_linux | — | Upgrade curl | Feb 8, 2019 | Dec 26, 2018 |
| Centos_linux | — | Upgrade curl-minimal-debuginfoUpgrade libcurl-minimal-debuginfoUpgrade curl-debuginfoUpgrade libcurlUpgrade libcurl-minimalUpgrade libcurl-debuginfoUpgrade curlUpgrade curl-debugsourceUpgrade libcurl-devel | Nov 6, 2019 | Dec 26, 2018 |
| Debian | — | Upgrade wget | Jul 30, 2024 | Dec 26, 2018 |
| Freebsd | — | Upgrade wget | Apr 12, 2019 | Apr 12, 2019 |
| Gentoo Linux | — | Upgrade net-misc/wget. | Mar 11, 2019 | Dec 26, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade wget | Jun 27, 2019 | Dec 26, 2018 |
| Oracle Solaris | — | Upgrade web/wget to version 1.20.3-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Dec 26, 2018 |
| Oracle_linux | — | Upgrade libcurl-minimalUpgrade curlUpgrade libcurl-develUpgrade libcurl | Oct 5, 2022 | Dec 26, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 26, 2018 |
| Redhat_linux | — | Upgrade curl-debugsourceUpgrade libcurl-minimalUpgrade libcurl-develUpgrade libcurl-debuginfoNo solution existsUpgrade curlUpgrade curl-minimal-debuginfoUpgrade libcurl-minimal-debuginfoUpgrade libcurlUpgrade curl-debuginfo | Nov 6, 2019 | Dec 26, 2018 |
| Suse | — | Upgrade wget | Jan 18, 2019 | Dec 26, 2018 |
| Ubuntu | — | Upgrade wget | Apr 17, 2019 | Dec 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub