The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2979 advisory.

    The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.

    Security Fix(es):

    * wget: do_conversion() heap-based buffer overflow vulnerability (CVE-2019-5953)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the wget package has been released.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-0983 advisory.

    [1.19.5-7.0.1.1]
    - SSLv3 support dropped from openssll, v3 test certificates need to be replaced [Orabug: 29613455]

    [1.19.5-7.1]
    - Fix tests with on armhfp

    [1.19.5-7.1]
    - Fix CVE-2019-5953 (#1696735)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-1228 advisory.

    [1.14-18.1]
    - Fix CVE-2019-5953 (#1696733)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Buffer overflow in GNU Wget 1.20.1 and earlier allows     remote attackers to cause a denial-of-service (DoS) or     may execute an arbitrary code via unspecified     vectors.(CVE-2019-5953)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for wget is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.

Security Fix(es) :

* wget: do_conversion() heap-based buffer overflow vulnerability (CVE-2019-5953)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
129741	RHEL 7 : wget (RHSA-2019:2979)	Nessus	Red Hat Local Security Checks	2019/10/9	2024/11/6	critical
126204	Photon OS 1.0: Wget PHSA-2019-1.0-0237	Nessus	PhotonOS Local Security Checks	2019/6/25	2024/5/14	critical
127572	Oracle Linux 8 : wget (ELSA-2019-0983)	Nessus	Oracle Linux Local Security Checks	2019/8/12	2024/10/22	critical
125190	Oracle Linux 7 : wget (ELSA-2019-1228)	Nessus	Oracle Linux Local Security Checks	2019/5/16	2024/10/22	critical
126863	EulerOS 2.0 SP2 : wget (EulerOS-SA-2019-1736)	Nessus	Huawei Local Security Checks	2019/7/22	2024/5/9	critical
144234	Virtuozzo 7 : wget (VZLSA-2019-1228)	Nessus	Virtuozzo Local Security Checks	2020/12/15	2024/2/1	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical