CVE-2018-0494
Fixed in a distro release EPSS 16%
GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.
Products: gnu wget, canonical ubuntu_linux, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | wget | 1.19.5-r0 |
| Alpine 3.11 | wget | 1.19.5-r0 |
| Alpine 3.12 | wget | 1.19.5-r0 |
| Alpine 3.13 | wget | 1.19.5-r0 |
| Alpine 3.14 | wget | 1.19.5-r0 |
| Alpine 3.15 | wget | 1.19.5-r0 |
| Alpine 3.16 | wget | 1.19.5-r0 |
| Alpine 3.17 | wget | 1.19.5-r0 |
| Alpine 3.18 | wget | 1.19.5-r0 |
| Alpine 3.19 | wget | 1.19.5-r0 |
| Alpine 3.20 | wget | 1.19.5-r0 |
| Alpine 3.21 | wget | 1.19.5-r0 |
| Alpine 3.22 | wget | 1.19.5-r0 |
| Alpine 3.23 | wget | 1.19.5-r0 |
| Alpine 3.24 | wget | 1.19.5-r0 |
| Alpine 3.4 | wget | 1.18-r3 |
| Alpine 3.5 | wget | 1.18-r4 |
| Alpine 3.6 | wget | 1.19.5-r0 |
| Alpine 3.7 | wget | 1.19.5-r0 |
| Alpine 3.8 | wget | 1.19.5-r0 |
| Alpine 3.9 | wget | 1.19.5-r0 |
| Amazon Linux 2 | wget | 1.14-18.amzn2 |
| Debian 12 | wget | 1.19.5-1 |
| Debian 13 | wget | 1.19.5-1 |
| Debian 14 | wget | 1.19.5-1 |
| Debian 7 | wget | 1.13.4-3+deb7u6 |
| Debian 8 | wget | 1.16-1+deb8u5 |
| Debian 9 | wget | 1.18-5+deb9u2 |
| Red Hat Enterprise Linux 7 | wget | 0:1.14-18.el7 |
| Red Hat Enterprise Linux 7 | wget-debuginfo | 0:1.14-18.el7 |
| SUSE Linux Enterprise Desktop 12 SP3 | wget | 1.14-21.7.1 |
| SUSE Linux Enterprise Server 11 SP4 | wget | 1.11.4-1.41.3.1 |
| SUSE Linux Enterprise Server 11-SECURITY | wget-openssl1 | 1.11.4-1.41.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | wget | 1.14-21.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | wget | 1.11.4-1.41.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | wget | 1.14-21.7.1 |
| Ubuntu 14.04 LTS | wget | 1.15-1ubuntu1.14.04.4 |
| Ubuntu 16.04 LTS | wget | 1.17.1-1ubuntu1.4 |
| Ubuntu 18.04 LTS | wget | 1.19.4-1ubuntu2.1 |
| openSUSE Tumbleweed | wget | 1.21.1-2.2 |