Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowsoftware update

Debian 8 & 9: DSA-4008-1 Critical: Wget Buffer Overflow Threat

Antti Levomaeki, Christian Jalio, Joonas Pihlaja and Juhani Eronen discovered two buffer overflows in the HTTP protocol handler of the Wget download tool, which could result in the execution of arbitrary code when connecting to a malicious HTTP server. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4008-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff October 28, 2017 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : wget CVE ID : CVE-2017-13089 CVE-2017-13090 Antti Levomaeki, Christian Jalio, Joonas Pihlaja and Juhani Eronen discovered two buffer overflows in the HTTP protocol handler of the Wget download tool, which could result in the execution of arbitrary code when connecting to a malicious HTTP server. For the oldstable distribution (jessie), these problems have been fixed in version 1.16-1+deb8u4. For the stable distribution (stretch), these problems have been fixed in version 1.18-5+deb9u1. We recommend that you upgrade your wget packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Recent findings have identified two buffer overflows in Wget that might enable the execution of unauthorized code during connections to malicious servers.. Debian Security Update,Wget Buffer Overflow,DSA-4008-1 Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Oct 28, 2017 •Critical Debian