Wind River Support Network

HomeDefectsLIN1023-9240
Fixed

LIN1023-9240 : Security Advisory - wget - CVE-2024-10524

Created: Nov 11, 2024    Updated: Feb 7, 2025
Resolved Date: Feb 7, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.15
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

https://nvd.nist.gov/vuln/detail/CVE-2024-10524

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube