Wind River Support Network

HomeDefectsLIN9-3519

Fixed

LIN9-3519 : Security Advisory - wget - CVE-2017-6508

Created: Mar 13, 2017 Updated: May 29, 2018

Resolved Date: Apr 10, 2018

Found In Version: 9.0.0.4

Fix Version: 9.0.0.5

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6508

Other Downloads

Wind River Linux 9.0.0.5

CVEs

CVE-2017-6508