http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4

http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html

96877

GLSA-201706-16

According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A CRLF injection flaw was found in the way wget handled     URLs. A remote attacker could use this flaw to inject     arbitrary HTTP headers in requests, via CRLF sequences     in the host sub-component of a URL, by tricking a user     running wget into processing crafted     URLs.(CVE-2017-6508)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wget package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - A CRLF injection flaw was found in the way wget handled     URLs. A remote attacker could use this flaw to inject     arbitrary HTTP headers in requests, via CRLF sequences     in the host sub-component of a URL, by tricking a user     running wget into processing crafted     URLs.(CVE-2017-6508)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - CRLF injection vulnerability in the url_parse function     in url.c in Wget through 1.19.1 allows remote attackers     to inject arbitrary HTTP headers via CRLF sequences in     the host subcomponent of a URL.(CVE-2017-6508)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the wget package has been released.

An update of 'binutils', 'linux', 'wget' packages of Photon OS has been released.

An update of [systemd,wget,shadow,glibc] packages for PhotonOS has been released.

Antti Levomaki, Christian Jalio, and Joonas Pihlaja discovered that Wget incorrectly handled certain HTTP responses. A remote attacker could use this issue to cause Wget to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-13089, CVE-2017-13090)

Dawid Golunski discovered that Wget incorrectly handled recursive or mirroring mode. A remote attacker could possibly use this issue to bypass intended access list restrictions. (CVE-2016-7098)

Orange Tsai discovered that Wget incorrectly handled CRLF sequences in HTTP headers. A remote attacker could possibly use this issue to inject arbitrary HTTP headers. (CVE-2017-6508).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

CRLF injection in the url_parse function in url.c

A CRLF injection flaw was found in the way wget handled URLs. A remote attacker could use this flaw to inject arbitrary HTTP headers in requests, via CRLF sequences in the host sub-component of a URL, by tricking a user running wget into processing crafted URLs.
(CVE-2017-6508)

- fixed CVE-2017-6508 CRLF injection in the url_parse     function in url.c

  - fixed use of .netrc

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201706-16 (GNU Wget: Header injection)

    It was discovered that there was a header injection vulnerability in GNU       Wget which allowed remote attackers to inject arbitrary HTTP headers via       CRLF sequences in the host subcomponent of a URL.
  Impact :

    A remote attacker could inject arbitrary HTTP headers in requests by       tricking a user running GNU Wget into processing crafted URLs.
  Workaround :

    There is no known workaround at this time.

Fixed CVE-2017-6508: CRLF injection in the url_parse function in url.c

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for wget fixes the following issues :

Security issue fixed :

  - CVE-2017-6508: (url_parse): Reject control characters in     host part of URL (bsc#1028301).

This update was imported from the SUSE:SLE-12:Update update project.

This update for wget fixes the following issues: Security issue fixed :

  - CVE-2017-6508: (url_parse): Reject control characters in     host part of URL (bsc#1028301).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that there was a header injection vulnerability in wget (a tool to retrieve files from the web) which allowed remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.

For Debian 7 'Wheezy', this issue has been fixed in wget version 1.13.4-3+deb7u4.

We recommend that you upgrade your wget packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
134747	EulerOS Virtualization 3.0.2.2 : wget (EulerOS-SA-2020-1281)	Nessus	Huawei Local Security Checks	medium
134491	EulerOS Virtualization for ARM 64 3.0.2.0 : wget (EulerOS-SA-2020-1202)	Nessus	Huawei Local Security Checks	medium
132216	EulerOS 2.0 SP3 : wget (EulerOS-SA-2019-2681)	Nessus	Huawei Local Security Checks	medium
131654	EulerOS 2.0 SP2 : wget (EulerOS-SA-2019-2501)	Nessus	Huawei Local Security Checks	medium
130660	EulerOS 2.0 SP5 : wget (EulerOS-SA-2019-2198)	Nessus	Huawei Local Security Checks	medium
121793	Photon OS 2.0: Wget PHSA-2017-2.0-0008	Nessus	PhotonOS Local Security Checks	medium
121710	Photon OS 1.0: Wget PHSA-2017-0023	Nessus	PhotonOS Local Security Checks	high
111906	Photon OS 2.0: Binutils / Linux / Wget PHSA-2017-2.0-0008 (deprecated)	Nessus	PhotonOS Local Security Checks	medium
111872	Photon OS 1.0: Glibc / Shadow / Systemd / Wget PHSA-2017-0023 (deprecated)	Nessus	PhotonOS Local Security Checks	high
104211	Ubuntu 14.04 LTS / 16.04 LTS / 17.04 / 17.10 : wget vulnerabilities (USN-3464-1)	Nessus	Ubuntu Local Security Checks	high
102869	Amazon Linux AMI : wget (ALAS-2017-881)	Nessus	Amazon Linux Local Security Checks	medium
101612	Fedora 26 : wget (2017-38c3781b89)	Nessus	Fedora Local Security Checks	medium
100942	GLSA-201706-16 : GNU Wget: Header injection	Nessus	Gentoo Local Security Checks	medium
100750	Fedora 24 : wget (2017-ed1c665a3f)	Nessus	Fedora Local Security Checks	medium
100604	Fedora 25 : wget (2017-22f1a8404e)	Nessus	Fedora Local Security Checks	medium
99111	openSUSE Security Update : wget (openSUSE-2017-412)	Nessus	SuSE Local Security Checks	medium
97915	SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2017:0800-1)	Nessus	SuSE Local Security Checks	medium
97914	SUSE SLES11 Security Update : wget (SUSE-SU-2017:0799-1)	Nessus	SuSE Local Security Checks	medium
97642	Debian DLA-851-1 : wget security update	Nessus	Debian Local Security Checks	medium

CVE-2017-6508

MEDIUM

Description

References

Details

Risk Information

CVSS v2.0

CVSS v3.0

Vulnerable Software

Configuration 1

Tenable Plugins

medium

medium

medium

medium

medium

medium

high

medium

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium