crítica
CVE-2025-69194
wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta), Azure Linux (alta).
Descripción
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Azure Linux 3.0 | wget | 0:2.1.0-7.azl3 |
| debian 11 | wget2 | sin corrección indicada |
| debian 12 | wget2 | sin corrección indicada |
| debian 13 | wget2 | 2.2.0+ds-1+deb13u1 |
| debian 14 | wget2 | 2.2.0+ds-3 |
| echo | wget2 | 2.2.0+ds-1+deb13u1 |
| rapidfort alpine 3.20 | wget2 | 2.2.1-r0 |
| rapidfort alpine 3.21 | wget2 | 2.2.1-r0 |
| rapidfort alpine 3.22 | wget2 | 2.2.1-r0 |
| rapidfort alpine 3.23 | wget2 | 2.2.1-r0 |
| rapidfort alpine 3.24 | wget2 | 2.2.1-r0 |
| rapidfort debian 12 | wget2 | 0:2.2.0+ds-1+deb13u1 |
Mostrar las 29 entradas de 18 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Azure Linux 3.0 | wget | 0:2.1.0-7.azl3 |
| debian 11 | wget2 | sin corrección indicada |
| debian 12 | wget2 | sin corrección indicada |
| debian 13 | wget2 | 2.2.0+ds-1+deb13u1 |
| debian 14 | wget2 | 2.2.0+ds-3 |
| echo | wget2 | 2.2.0+ds-1+deb13u1 |
| rapidfort alpine 3.20 | wget2 | 2.2.1-r0 |
| rapidfort alpine 3.21 | wget2 | 2.2.1-r0 |
| rapidfort alpine 3.22 | wget2 | 2.2.1-r0 |
| rapidfort alpine 3.23 | wget2 | 2.2.1-r0 |
| rapidfort alpine 3.24 | wget2 | 2.2.1-r0 |
| rapidfort debian 12 | wget2 | 0:2.2.0+ds-1+deb13u1 |
| rapidfort debian 13 | wget2 | 0:2.2.0+ds-1+deb13u1 |
| rapidfort fedora 41 | rf-wget2 | 0:2.2.0-4.fc41 |
| rapidfort fedora 41 | rf-wget2-libs | 0:2.2.0-4.fc41 |
| rapidfort fedora 41 | rf-wget2-wget | 0:2.2.0-4.fc41 |
| rapidfort fedora 41 | wget2 | 0:2.2.0-4.fc41 |
| rapidfort fedora 41 | wget2-libs | 0:2.2.0-4.fc41 |
| rapidfort fedora 41 | wget2-wget | 0:2.2.0-4.fc41 |
| rapidfort fedora 43 | rf-wget2 | 0:2.2.1-1.fc43 |
| rapidfort fedora 43 | rf-wget2-libs | 0:2.2.1-1.fc43 |
| rapidfort fedora 43 | rf-wget2-wget | 0:2.2.1-1.fc43 |
| rapidfort fedora 43 | wget2 | 0:2.2.1-1.fc43 |
| rapidfort fedora 43 | wget2-devel | 2.2.1-1.fc43 |
| rapidfort fedora 43 | wget2-libs | 0:2.2.1-1.fc43 |
| rapidfort fedora 43 | wget2-wget | 0:2.2.1-1.fc43 |
| rapidfort ubuntu 20.04 | wget2 | sin corrección indicada |
| rapidfort ubuntu 22.04 | wget2 | sin corrección indicada |
| rapidfort ubuntu 24.04 | wget2 | sin corrección indicada |