CVE-2018-0494 Other in WGet

Medium 6.5 Published 6 May 2018 Updated 5 Aug 2024

An attacker can inject cookies into HTTP requests via crafted continuation lines, potentially bypassing security controls or modifying session data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2018-0494?

CVE-2018-0494 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 6 May 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

Weakness: CWE-20

Which versions are affected by CVE-2018-0494?

It affects 6 products.

Linux distribution packages (14)

`wget` Red Hat:enterprise_linux:7::client	All versions	`0:1.14-18.el7`
`wget-debuginfo` Red Hat:enterprise_linux:7::client	All versions	`0:1.14-18.el7`
`wget` Red Hat:enterprise_linux:7::computenode	All versions	`0:1.14-18.el7`
`wget-debuginfo` Red Hat:enterprise_linux:7::computenode	All versions	`0:1.14-18.el7`
`wget` Red Hat:enterprise_linux:7::server	All versions	`0:1.14-18.el7`
`wget-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:1.14-18.el7`
`wget` Red Hat:enterprise_linux:7::workstation	All versions	`0:1.14-18.el7`
`wget-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`0:1.14-18.el7`
`wget` SUSE:Linux Enterprise Desktop 12 SP3	All versions	`1.14-21.7.1`
`wget` SUSE:Linux Enterprise Server 11 SP4	All versions	`1.11.4-1.41.3.1`
`wget-openssl1` SUSE:Linux Enterprise Server 11-SECURITY	All versions	`1.11.4-1.41.3.1`
`wget` SUSE:Linux Enterprise Server 12 SP3	All versions	`1.14-21.7.1`
`wget` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	All versions	`1.11.4-1.41.3.1`
`wget` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	All versions	`1.14-21.7.1`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Gnu Wget, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.

How do I fix CVE-2018-0494?

Upgrade to a fixed version.

Is CVE-2018-0494 being exploited?

There is no known exploitation of CVE-2018-0494 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2018-0494, CLEANSTART-2026-PC86081, DEBIAN-CVE-2018-0494, DLA-1375-1, DSA-4195-1, GHSA-7cw3-q27m-9w5f and 6 more.