CVE-2016-4971
Fixed in a distro release EPSS 46%
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
Products: gnu wget, canonical ubuntu_linux, oracle solaris, paloaltonetworks pan-os
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | wget | 1.17.1-r1 |
| Debian 12 | wget | 1.18-1 |
| Debian 13 | wget | 1.18-1 |
| Debian 14 | wget | 1.18-1 |
| Debian 7 | wget | 1.13.4-3+deb7u3 |
| Red Hat Enterprise Linux 7 | wget | 0:1.14-13.el7 |
| Red Hat Enterprise Linux 7 | wget-debuginfo | 0:1.14-13.el7 |
| SUSE Linux Enterprise Desktop 12 SP1 | wget | 1.14-10.3 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | wget-openssl1 | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | wget-openssl1 | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP4 | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11-SECURITY | wget-openssl1 | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 12 SP1 | wget | 1.14-10.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | wget | 1.14-10.3 |
| SUSE Manager 2.1 | wget | 1.11.4-1.32.1 |
| SUSE Manager Proxy 2.1 | wget | 1.11.4-1.32.1 |
| SUSE OpenStack Cloud 5 | wget | 1.11.4-1.32.1 |
| Ubuntu 14.04 LTS | wget | 1.15-1ubuntu1.14.04.2 |
| Ubuntu 16.04 LTS | wget | 1.17.1-1ubuntu1.1 |
| openSUSE Tumbleweed | wget | 1.18-2.3 |