USN-8572-1: Wget vulnerability
It was discovered that Wget did not properly validate the IP address provided in an FTP PASV response when operating in FTP passive mode. A remote attacker controlling a malicious FTP server, or an HTTP server that redirects to an FTP URL, could possibly use this issue to redirect Wget's data connection to an arbitrary address and perform server-side request forgery, potentially accessing localhost services or internal network resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/wgetto a version that resolves this vulnerability.Fixed in 1.25.0-2ubuntu4.3 - Upgrade
Upgrade
ubuntu/wgetto a version that resolves this vulnerability.Fixed in 1.21.4-1ubuntu4.4 - Upgrade
Upgrade
ubuntu/wgetto a version that resolves this vulnerability.Fixed in 1.21.2-2ubuntu1.4 - Upgrade
Upgrade
ubuntu/wgetto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Frequently Asked Questions
What is the severity of USN-8572-1?
The severity of USN-8572-1 is rated as 33, indicating a moderate level of risk associated with this vulnerability.
How do I fix USN-8572-1?
To fix USN-8572-1, update GNU Wget to the latest version recommended by your operating system package manager.
What systems are affected by USN-8572-1?
USN-8572-1 affects various systems running vulnerable versions of GNU Wget.
What type of vulnerability is described in USN-8572-1?
USN-8572-1 describes a vulnerability in GNU Wget that may allow for potential security risks during file retrieval.
Is the vulnerability in USN-8572-1 actively exploited?
As of now, there are no reports indicating that the vulnerability in USN-8572-1 is being actively exploited.