CVE-2017-6508: CRLF Injection
CRLF injection vulnerability in the urlparse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6508?
CVE-2017-6508 is rated as medium severity due to its potential for allowing arbitrary HTTP header injection.
How do I fix CVE-2017-6508?
To fix CVE-2017-6508, update Wget to version 1.19.2 or later, which mitigates the vulnerability.
What are the potential impacts of CVE-2017-6508?
The potential impact of CVE-2017-6508 includes the possibility of remote attackers injecting malicious HTTP headers, which could lead to further exploitation.
Which versions of Wget are affected by CVE-2017-6508?
CVE-2017-6508 affects Wget versions up to and including 1.19.1.
Can CVE-2017-6508 be exploited over any network?
Yes, CVE-2017-6508 can be exploited over any network where the vulnerable version of Wget is used to process URLs from untrusted sources.