CVE-2016-7098 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.1 HIGH	NETWORK	HIGH	NONE	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 92%

Affected Products (NVD)

Vendor	Product	Version
gnu	wget	𝑥 ≤ 1.17

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

wget

bookworm	1.21.3-1 fixed
bullseye	1.21-1+deb11u1 fixed
sid	1.24.5-2 fixed
trixie	1.24.5-2 fixed
wheezy	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

wget

artful	Fixed 1.19.1-3ubuntu1.1 released
precise	ignored
trusty	Fixed 1.15-1ubuntu1.14.04.3 released
xenial	Fixed 1.17.1-1ubuntu1.3 released
yakkety	ignored
zesty	Fixed 1.18-2ubuntu1.1 released

Known Exploits!

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00083.html

http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00134.html

http://lists.opensuse.org/opensuse-updates/2016-09/msg00044.html

http://lists.opensuse.org/opensuse-updates/2017-01/msg00007.html

http://www.openwall.com/lists/oss-security/2016/08/27/2

http://www.securityfocus.com/bid/93157

https://lists.debian.org/debian-lts-announce/2020/01/msg00031.html

https://www.exploit-db.com/exploits/40824/

http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00083.html

http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00134.html

http://lists.opensuse.org/opensuse-updates/2016-09/msg00044.html

http://lists.opensuse.org/opensuse-updates/2017-01/msg00007.html

http://www.openwall.com/lists/oss-security/2016/08/27/2

http://www.securityfocus.com/bid/93157

https://lists.debian.org/debian-lts-announce/2020/01/msg00031.html

https://www.exploit-db.com/exploits/40824/