CVE-2017-6508
Description
CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
Risk Information
Base Score
6.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.186
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| retrieves files from the web (USN-3464-1) wget_1.18-2ubuntu1.1_i386.deb | Linux |
| retrieves files from the web (USN-3464-1) wget_1.18-2ubuntu1.1_amd64.deb | Linux |
| retrieves files from the web (USN-3464-1) wget_1.19.1-3ubuntu1.1_amd64.deb | Linux |
| SUSE-SU-2017:0800-1(SUSE Linux Enterprise Desktop 12-SP1 ) wget-1.14-20.1.x86_64.rpm | Linux |
| SUSE-SU-2017:0800-1(SUSE Linux Enterprise Desktop 12-SP1 ) wget-debuginfo-1.14-20.1.x86_64.rpm | Linux |
| SUSE-SU-2017:0800-1(SUSE Linux Enterprise Desktop 12-SP1 ) wget-debugsource-1.14-20.1.x86_64.rpm | Linux |
| Improper Neutralization of CRLF Sequences (CRLF Injection) Vulnerability (CVE-2017-6508) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234