Количество 12
Количество 12
GHSA-fxf9-rxpj-26gx
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
CVE-2026-58469
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
CVE-2026-58469
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
CVE-2026-58469
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
CVE-2026-58469
GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing
CVE-2026-58469
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buff ...
SUSE-SU-2026:3337-1
Security update for wget
RLSA-2026:62144
Moderate: wget security, bug fix, and enhancement update
ELSA-2026-62144-0
ELSA-2026-62144-0: wget security, bug fix, and enhancement update (MODERATE)
openSUSE-SU-2026:21665-1
Security update for wget
SUSE-SU-2026:3206-1
Security update for wget
SUSE-SU-2026:3148-1
Security update for wget
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-fxf9-rxpj-26gx GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
 | CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | CVE-2026-58469 GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing | 0% Низкий | около 1 месяца назад | |
| CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buff ... | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | SUSE-SU-2026:3337-1 Security update for wget | 0% Низкий | около 2 месяцев назад | |
 | RLSA-2026:62144 Moderate: wget security, bug fix, and enhancement update | 16 дней назад | ||
| ELSA-2026-62144-0 ELSA-2026-62144-0: wget security, bug fix, and enhancement update (MODERATE) | 15 дней назад | ||
| openSUSE-SU-2026:21665-1 Security update for wget | 22 дня назад | ||
| SUSE-SU-2026:3206-1 Security update for wget | около 2 месяцев назад | ||
| SUSE-SU-2026:3148-1 Security update for wget | около 2 месяцев назад |
Уязвимостей на страницу