CVE

Id
93918  
CVE No.
CVE-2016-7098  
Status
Candidate  
Description
Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.  
Phase
Assigned (20160826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794824 93918 CVE-2016-7098 MLIST:[bug-wget] 20160814 Wget - acess list bypass / race condition PoC  View
794825 93918 CVE-2016-7098 URL:http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00083.html  View
794826 93918 CVE-2016-7098 MLIST:[bug-wget] 20160824 Re: Wget - acess list bypass / race condition PoC  View
794827 93918 CVE-2016-7098 URL:http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00134.html  View
794828 93918 CVE-2016-7098 MLIST:[oss-security] 20160827 Re: CVE Request - Gnu Wget 1.17 - Design Error Vulnerability  View
794829 93918 CVE-2016-7098 URL:http://www.openwall.com/lists/oss-security/2016/08/27/2  View
794830 93918 CVE-2016-7098 SUSE:openSUSE-SU-2016:2284  View
794831 93918 CVE-2016-7098 URL:http://lists.opensuse.org/opensuse-updates/2016-09/msg00044.html  View
794832 93918 CVE-2016-7098 SUSE:openSUSE-SU-2017:0015  View
794833 93918 CVE-2016-7098 URL:http://lists.opensuse.org/opensuse-updates/2017-01/msg00007.html  View
794834 93918 CVE-2016-7098 BID:93157  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4010 JVNDB-2016-004783 PHP の ext/standard/var_unserializer.re におけるサービス運用妨害 (DoS) の脆弱性 PHP の ext/standard/var_unserializer.re は、オブジェクトのデシリアライゼーションの失敗を誤って処理するため、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-7411 93918 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004783.html  View