kritik
CVE-2019-5953
wget: do_conversion() heap-based buffer overflow vulnerability
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: Red Hat (yüksek), Amazon (yüksek), Oracle (yüksek), Ubuntu (orta).
Açıklama
Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 1.0 | wget | 1.20.3-1.ph1 |
| Photon OS 2.0 | wget | 1.20.3-1.ph2 |
| Photon OS 3.0 | wget | 1.20.3-1.ph3 |
| alpine 3.10 | wget | 1.20.3-r0 |
| alpine 3.11 | wget | 1.20.3-r0 |
| alpine 3.12 | wget | 1.20.3-r0 |
| alpine 3.13 | wget | 1.20.3-r0 |
| alpine 3.14 | wget | 1.20.3-r0 |
| alpine 3.15 | wget | 1.20.3-r0 |
| alpine 3.16 | wget | 1.20.3-r0 |
| alpine 3.17 | wget | 1.20.3-r0 |
| alpine 3.18 | wget | 1.20.3-r0 |
44 kaynaktaki 47 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 1.0 | wget | 1.20.3-1.ph1 |
| Photon OS 2.0 | wget | 1.20.3-1.ph2 |
| Photon OS 3.0 | wget | 1.20.3-1.ph3 |
| alpine 3.10 | wget | 1.20.3-r0 |
| alpine 3.11 | wget | 1.20.3-r0 |
| alpine 3.12 | wget | 1.20.3-r0 |
| alpine 3.13 | wget | 1.20.3-r0 |
| alpine 3.14 | wget | 1.20.3-r0 |
| alpine 3.15 | wget | 1.20.3-r0 |
| alpine 3.16 | wget | 1.20.3-r0 |
| alpine 3.17 | wget | 1.20.3-r0 |
| alpine 3.18 | wget | 1.20.3-r0 |
| alpine 3.19 | wget | 1.20.3-r0 |
| alpine 3.20 | wget | 1.20.3-r0 |
| alpine 3.21 | wget | 1.20.3-r0 |
| alpine 3.22 | wget | 1.20.3-r0 |
| alpine 3.23 | wget | 1.20.3-r0 |
| alpine 3.24 | wget | 1.20.3-r0 |
| alpine edge | wget | 1.20.3-r0 |
| amazon linux 1 | wget | 1.18-5.30.amzn1 |
| amazon linux 1 | wget-debuginfo | 1.18-5.30.amzn1 |
| amazon linux 2 | wget | 1.14-18.amzn2.1 |
| amazon linux 2 | wget-debuginfo | 1.14-18.amzn2.1 |
| debian 11 | wget | 1.20.1-1.1 |
| debian 12 | wget | 1.20.1-1.1 |
| debian 13 | wget | 1.20.1-1.1 |
| debian 14 | wget | 1.20.1-1.1 |
| debian 8 | wget | 1.16-1+deb8u6 |
| debian 9 | wget | 1.18-5+deb9u3 |
| echo | wget | 1.20.1-1.1 |
| Oracle Linux 7 | wget | 1.14-18.el7_6.1 |
| Oracle Linux 8 | wget | 1.19.5-7.0.1.el8_0.1 |
| root.io alpine 3.18 | rootio-wget | 1.20.3-r0 |
| root.io alpine 3.19 | rootio-wget | 1.20.3-r0 |
| root.io alpine 3.20 | rootio-wget | 1.20.3-r0 |
| root.io debian 11 | rootio-wget | 1.20.1-1.1 |
| root.io debian 12 | rootio-wget | 1.20.1-1.1 |
| root.io debian 13 | rootio-wget | 1.20.1-1.1 |
| seal Red Hat 6 | seal-wget | 1.12-10.el6+sp999 |
| seal Red Hat 6 | wget | 1.12-10.el6+sp999 |
| ubuntu 14.04 | wget | 1.15-1ubuntu1.14.04.5 |
| ubuntu 14.04-ESM | wget | 1.15-1ubuntu1.14.04.5 |
| ubuntu 16.04 | wget | 1.17.1-1ubuntu1.5 |
| ubuntu 16.04-ESM | wget | 1.17.1-1ubuntu1.5 |
| ubuntu 18.04 | wget | 1.19.4-1ubuntu2.2 |
| ubuntu 18.04-ESM | wget | 1.19.4-1ubuntu2.2 |
| ubuntu 18.10 | wget | 1.19.5-1ubuntu1.1 |
Referanslar
- http://jvn.jp/en/jp/JVN25261088/index.html
- https://access.redhat.com/errata/RHSA-2019:2979
- https://access.redhat.com/errata/RHSA-2019:3168
- https://access.redhat.com/security/cve/CVE-2019-5953
- https://jvn.jp/en/jp/JVN25261088/
- https://linux.oracle.com/cve/CVE-2019-5953.html
- https://linux.oracle.com/errata/ELSA-2019-1228.html
- https://lists.gnu.org/archive/html/bug-wget/2019-04/msg00001.html
15 referansın hepsi
- https://nvd.nist.gov/vuln/detail/CVE-2019-5953
- https://security.gentoo.org/glsa/201908-19
- https://support.f5.com/csp/article/K14560101
- https://ubuntu.com/security/notices/USN-3943-1
- https://ubuntu.com/security/notices/USN-3943-2
- https://www.cve.org/CVERecord?id=CVE-2019-5953
- https://www.gnu.org/software/wget/