Количество 16
Количество 16
CVE-2026-58472
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.
CVE-2026-58472
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.
CVE-2026-58472
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.
CVE-2026-58472
GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding
CVE-2026-58472
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buff ...
GHSA-332r-8pmf-8m9p
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.
RLSA-2026:62143
Moderate: wget security, bug fix, and enhancement update
RLSA-2026:62142
Moderate: wget security, bug fix, and enhancement update
ELSA-2026-62143-0
ELSA-2026-62143-0: wget security, bug fix, and enhancement update (MODERATE)
ELSA-2026-62142-0
ELSA-2026-62142-0: wget security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2026:3205-1
Security update for wget
RLSA-2026:62144
Moderate: wget security, bug fix, and enhancement update
ELSA-2026-62144-0
ELSA-2026-62144-0: wget security, bug fix, and enhancement update (MODERATE)
openSUSE-SU-2026:21665-1
Security update for wget
SUSE-SU-2026:3206-1
Security update for wget
SUSE-SU-2026:3148-1
Security update for wget
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-58472 GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase. | CVSS3: 5.9 | 0% Низкий | 2 месяца назад |
 | CVE-2026-58472 GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase. | CVSS3: 5.9 | 0% Низкий | 2 месяца назад |
 | CVE-2026-58472 GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase. | CVSS3: 5.9 | 0% Низкий | 2 месяца назад |
 | CVE-2026-58472 GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding | 0% Низкий | около 1 месяца назад | |
| CVE-2026-58472 GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buff ... | CVSS3: 5.9 | 0% Низкий | 2 месяца назад |
| GHSA-332r-8pmf-8m9p GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase. | CVSS3: 5.9 | 0% Низкий | 2 месяца назад |
 | RLSA-2026:62143 Moderate: wget security, bug fix, and enhancement update | 16 дней назад | ||
| RLSA-2026:62142 Moderate: wget security, bug fix, and enhancement update | 16 дней назад | ||
| ELSA-2026-62143-0 ELSA-2026-62143-0: wget security, bug fix, and enhancement update (MODERATE) | 17 дней назад | ||
| ELSA-2026-62142-0 ELSA-2026-62142-0: wget security, bug fix, and enhancement update (MODERATE) | 17 дней назад | ||
 | SUSE-SU-2026:3205-1 Security update for wget | около 2 месяцев назад | ||
| RLSA-2026:62144 Moderate: wget security, bug fix, and enhancement update | 16 дней назад | ||
| ELSA-2026-62144-0 ELSA-2026-62144-0: wget security, bug fix, and enhancement update (MODERATE) | 15 дней назад | ||
| openSUSE-SU-2026:21665-1 Security update for wget | 22 дня назад | ||
| SUSE-SU-2026:3206-1 Security update for wget | около 2 месяцев назад | ||
| SUSE-SU-2026:3148-1 Security update for wget | около 2 месяцев назад |
Уязвимостей на страницу