SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

[3.6] wget: CRLF injection in the url_parse function in url.c (CVE-2017-6508)

ID: oval:org.secpod.oval:def:1800533	Date: (C)2018-03-28 (M)2023-12-20
Class: PATCH	Family: unix

CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.

Platform:

Alpine Linux 3.6

Product:

wget

Reference:

7087

CVE-2017-6508


30479



423868



248392



909



195452



282