CVE-2019-5953 — wget - security update

Description

Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.

How to fix CVE-2019-5953

To remediate CVE-2019-5953, upgrade the affected package to a fixed version below.

Alpine/wget—upgrade to 1.20.3-r0 or later
Debian/wget—upgrade to 1.20.1-1.1 or later
—upgrade to 1.16-1+deb8u6 or later
—upgrade to 1.18-5+deb9u3 or later

Is CVE-2019-5953 being exploited?

Low — EPSS is 1.5%, meaning exploitation activity has not been observed at scale.

Affected packages (4)

from 0, < 1.20.3-r0
from 0, < 1.20.1-1.1
from 0, < 1.16-1+deb8u6
from 0, < 1.18-5+deb9u3

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	CRITICAL9.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (2)

ADVISORYsecurity.alpinelinux.org/vuln/CVE-2019-5953
ADVISORYsecurity-tracker.debian.org/tracker/CVE-2019-5953