Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:0800-1

Опубликовано: 22 мар. 2017
Источник: suse-cvrf

Описание

Security update for wget

This update for wget fixes the following issues:

Security issue fixed:

  • CVE-2017-6508: (url_parse): Reject control characters in host part of URL (bsc#1028301).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
wget-1.14-20.1
SUSE Linux Enterprise Desktop 12 SP2
wget-1.14-20.1
SUSE Linux Enterprise Server 12 SP1
wget-1.14-20.1
SUSE Linux Enterprise Server 12 SP2
wget-1.14-20.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
wget-1.14-20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
wget-1.14-20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
wget-1.14-20.1

Ссылки

Описание

CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:wget-1.14-20.1
SUSE Linux Enterprise Desktop 12 SP2:wget-1.14-20.1
SUSE Linux Enterprise Server 12 SP1:wget-1.14-20.1
SUSE Linux Enterprise Server 12 SP2:wget-1.14-20.1
Ссылки