Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 735
Alerts This Week
Warning Icon 1 735

Ubuntu 18.04 LTS USN-3943-1 Critical: Wget Remote Code Execution

ubuntu
Calendar Grey April 9, 2019
Dist Ubuntu Esm H88
Ubuntu Security Alert USN-3944-1 addresses critical issues in Curl, providing severity analysis and guidance for upgrades.
Several security issues were fixed in Wget.

Summary

Several security issues were fixed in Wget.

Software Description:

- wget: retrieves files from the web

Details:

It was discovered that Wget incorrectly handled certain inputs.

An attacker could possibly use this issue to access sensitive

information. This issue only affected Ubuntu 18.04 LTS and

Ubuntu 18.10. (CVE-2018-20483)

Kusano Kazuhiko discovered that Wget incorrectly handled certain

inputs. An attacker could possibly use this issue to execute arbitrary

code. (CVE-2019-5953)

Topics%20covered

Topics Covered

security advisory critical remote code execution information disclosure ubuntu wget

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  wget                            1.19.5-1ubuntu1.1

Ubuntu 18.04 LTS:
  wget                            1.19.4-1ubuntu2.2

Ubuntu 16.04 LTS:
  wget                            1.17.1-1ubuntu1.5

Ubuntu 14.04 LTS:
  wget                            1.15-1ubuntu1.14.04.5

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3943-1

  CVE-2018-20483, CVE-2019-5953

Severity
critical
Lowest
Low
Medium
High
Critical

April 08, 2019

Topics%20covered

Topics Covered

security advisory critical remote code execution information disclosure ubuntu wget

Package Information

  https://launchpad.net/ubuntu/+source/wget/1.19.5-1ubuntu1.1
  https://launchpad.net/ubuntu/+source/wget/1.19.4-1ubuntu2.2
  https://launchpad.net/ubuntu/+source/wget/1.17.1-1ubuntu1.5
  https://launchpad.net/ubuntu/+source/wget/1.15-1ubuntu1.14.04.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.