CVE-2016-7098
Fixed in a distro release EPSS 7%
Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.
Products: gnu wget
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wget | 1.18-4 |
| Debian 13 | wget | 1.18-4 |
| Debian 14 | wget | 1.18-4 |
| Debian 8 | wget | 1.16-1+deb8u7 |
| SUSE Linux Enterprise Desktop 12 SP1 | wget | 1.14-17.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | wget | 1.14-17.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | wget-openssl1 | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | wget-openssl1 | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11 SP4 | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 11-SECURITY | wget-openssl1 | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server 12 SP1 | wget | 1.14-17.1 |
| SUSE Linux Enterprise Server 12 SP2 | wget | 1.14-17.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | wget | 1.14-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | wget | 1.11.4-1.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | wget | 1.14-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | wget | 1.14-17.1 |
| SUSE Manager 2.1 | wget | 1.11.4-1.32.1 |
| SUSE Manager Proxy 2.1 | wget | 1.11.4-1.32.1 |
| SUSE OpenStack Cloud 5 | wget | 1.11.4-1.32.1 |
| Ubuntu 14.04 LTS | wget | 1.15-1ubuntu1.14.04.3 |
| Ubuntu 16.04 LTS | wget | 1.17.1-1ubuntu1.3 |