Vulnerability Details CVE-2016-7098
Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.063
EPSS Ranking 90.5%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 6.8
Products affected by CVE-2016-7098
-
-
-
cpe:2.3:a:gnu:wget:1.10.1
-
cpe:2.3:a:gnu:wget:1.10.2
-
-
cpe:2.3:a:gnu:wget:1.11.1
-
cpe:2.3:a:gnu:wget:1.11.2
-
cpe:2.3:a:gnu:wget:1.11.3
-
cpe:2.3:a:gnu:wget:1.11.4
-
cpe:2.3:a:gnu:wget:1.11.4-1
-
-
-
cpe:2.3:a:gnu:wget:1.13.1
-
cpe:2.3:a:gnu:wget:1.13.3
-
cpe:2.3:a:gnu:wget:1.13.4
-
-
-
-
cpe:2.3:a:gnu:wget:1.16.1
-
cpe:2.3:a:gnu:wget:1.16.2
-
cpe:2.3:a:gnu:wget:1.16.3
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-