{"id":"CVE-2019-5953","aliases":["ALPINE-CVE-2019-5953","BELL-CVE-2019-5953","DEBIAN-CVE-2019-5953","DLA-1760-1","DSA-4425-1","EUVD-2019-15521","GHSA-fhwx-v7qv-pjh3","RHSA-2019:0983","RHSA-2019:1228","RHSA-2019:2979","RHSA-2019:3168","SUSE-SU-2019:0925-1","SUSE-SU-2019:0956-1","UBUNTU-CVE-2019-5953","USN-3943-1","openSUSE-SU-2019:1236-1","openSUSE-SU-2024:11510-1"],"status":"published","title":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of...","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05862,"percentile":0.93251,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2019-04-04T00:00:00Z","modified":"2026-09-21T07:01:22Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wget","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wget","fixed_in":["1.20.1-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wget","fixed_in":["1.20.1-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wget","fixed_in":["1.20.1-1.1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"wget","fixed_in":["1.16-1+deb8u6"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"wget","fixed_in":["1.18-5+deb9u3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"wget","fixed_in":["0:1.19.5-7.el8_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"wget-debuginfo","fixed_in":["0:1.19.5-7.el8_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"wget-debugsource","fixed_in":["0:1.19.5-7.el8_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"wget","fixed_in":["0:1.14-18.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"wget-debuginfo","fixed_in":["0:1.14-18.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"wget","fixed_in":["0:1.14-18.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"wget-debuginfo","fixed_in":["0:1.14-18.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"wget","fixed_in":["0:1.14-18.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"wget-debuginfo","fixed_in":["0:1.14-18.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wget","fixed_in":["0:1.14-18.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wget-debuginfo","fixed_in":["0:1.14-18.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"wget","fixed_in":["0:1.14-16.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"wget-debuginfo","fixed_in":["0:1.14-16.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::server","package":"wget","fixed_in":["0:1.14-16.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::server","package":"wget-debuginfo","fixed_in":["0:1.14-16.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"wget","fixed_in":["0:1.14-15.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"wget-debuginfo","fixed_in":["0:1.14-15.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"wget","fixed_in":["0:1.14-15.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"wget-debuginfo","fixed_in":["0:1.14-15.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"wget","fixed_in":["0:1.14-15.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"wget-debuginfo","fixed_in":["0:1.14-15.el7_4.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"wget","fixed_in":["1.19.5-3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"wget","fixed_in":["1.14-21.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"wget","fixed_in":["1.15-1ubuntu1.14.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"wget","fixed_in":["1.17.1-1ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"wget","fixed_in":["1.19.4-1ubuntu2.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"wget","fixed_in":["1.19.5-lp150.7.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-1+deb8u6"}]}],"versions":["1.16-1","1.16-1+deb8u1","1.16-1+deb8u2","1.16-1+deb8u4","1.16-1+deb8u5"]},{"source":"osv","ecosystem":"Debian:9","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18-5+deb9u3"}]}],"versions":["1.18-5","1.18-5+deb9u1","1.18-5+deb9u2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.5-7.el8_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.5-7.el8_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"wget-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.5-7.el8_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-18.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-18.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-18.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-18.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-18.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-18.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-18.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-18.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-16.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-16.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-16.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-16.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-15.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-15.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-15.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-15.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-15.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"wget-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-15.el7_4.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.5-3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-21.10.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1ubuntu1.14.04.5"}]}],"versions":["1.14-2ubuntu1","1.14-5ubuntu1","1.15-1ubuntu1","1.15-1ubuntu1.14.04.1","1.15-1ubuntu1.14.04.2","1.15-1ubuntu1.14.04.3","1.15-1ubuntu1.14.04.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-1ubuntu1.5"}]}],"versions":["1.16.1-1ubuntu1","1.17.1-1ubuntu1","1.17.1-1ubuntu1.1","1.17.1-1ubuntu1.2","1.17.1-1ubuntu1.3","1.17.1-1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-1ubuntu2.2"}]}],"versions":["1.19.1-3ubuntu1","1.19.1-3ubuntu1.1","1.19.2-1ubuntu1","1.19.3-2ubuntu1","1.19.4-1ubuntu2","1.19.4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1ubuntu1.14.04.5"}]}],"versions":["1.14-2ubuntu1","1.14-5ubuntu1","1.15-1ubuntu1","1.15-1ubuntu1.14.04.1","1.15-1ubuntu1.14.04.2","1.15-1ubuntu1.14.04.3","1.15-1ubuntu1.14.04.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-1ubuntu1.5"}]}],"versions":["1.16.1-1ubuntu1","1.17.1-1ubuntu1","1.17.1-1ubuntu1.1","1.17.1-1ubuntu1.2","1.17.1-1ubuntu1.3","1.17.1-1ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-1ubuntu2.2"}]}],"versions":["1.19.1-3ubuntu1","1.19.1-3ubuntu1.1","1.19.2-1ubuntu1","1.19.3-2ubuntu1","1.19.4-1ubuntu2","1.19.4-1ubuntu2.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.5-lp150.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-2.2"}]}],"bundled":7}],"products":[{"vendor":"gnu","product":"wget"},{"vendor":"the gnu projec","product":"gnu wget"}],"references":[{"url":"https://www.gnu.org/software/wget/","tags":["x_refsource_MISC","x_transferred","Product","web"]},{"url":"http://jvn.jp/en/jp/JVN25261088/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.f5.com/csp/article/K14560101","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201908-19","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2979","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3168","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5953","tags":["advisory"]},{"url":"https://www.gnu.org/software/wget"},{"url":"https://github.com/advisories/GHSA-fhwx-v7qv-pjh3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-5953","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-5953","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-5953","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0983","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695679","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0983.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5953","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1228","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1228.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2979.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3168.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190925-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1131493","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5953","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190956-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-5953","tags":["report"]},{"url":"https://jvn.jp/en/jp/JVN25261088/","tags":["report"]},{"url":"https://lists.gnu.org/archive/html/bug-wget/2019-04/msg00001.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3943-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3943-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-20483","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5F5Z3PSNRHZAHO5AVKZDHXI62T5VUYUN/#5F5Z3PSNRHZAHO5AVKZDHXI62T5VUYUN","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20483","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-5953","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","status":"published","published":"2019-05-17T15:25:56Z","modified":"2024-08-04T20:09:23.991Z","updated_at":"2026-11-02T14:20:18.746972Z"}],"euvd":[{"id":"EUVD-2019-15521","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","status":"published","published":"2019-05-17T15:25:56Z","modified":"2024-08-04T20:09:23Z","updated_at":"2026-11-03T03:06:50.297232Z"}],"ghsa":[{"id":"GHSA-fhwx-v7qv-pjh3","title":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of...","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","status":"published","published":"2022-05-24T16:46:05Z","modified":"2024-04-04T00:42:29Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:55:51.119563Z"}],"nvd":[{"id":"CVE-2019-5953","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","status":"published","published":"2019-05-17T16:29:05.36Z","modified":"2026-06-17T02:38:27.89Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:13.880207Z"}],"osv":[{"id":"ALPINE-CVE-2019-5953","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","status":"published","published":"2019-05-17T16:29:05.36Z","modified":"2026-09-21T06:17:52.538641082Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2019-5953","title":"CVE-2019-5953 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:25.263296Z","modified":"2026-01-26T09:48:13.874768Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-5953","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","status":"published","published":"2019-05-17T16:29:05.36Z","modified":"2026-03-15T22:31:47.466537Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:12.675558Z"},{"id":"DEBIAN-CVE-2019-5953","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","status":"published","published":"2019-05-17T16:29:05.36Z","modified":"2026-09-21T07:01:22.867023835Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"RHSA-2019:0983","title":"Red Hat Security Advisory: wget security update","status":"published","published":"2024-09-16T02:22:59Z","modified":"2025-11-22T11:41:21Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1228","title":"Red Hat Security Advisory: wget security update","status":"published","published":"2024-09-16T02:22:53Z","modified":"2026-06-26T10:41:45Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2979","title":"Red Hat Security Advisory: wget security update","status":"published","published":"2024-09-16T02:23:05Z","modified":"2026-06-26T10:44:11Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3168","title":"Red Hat Security Advisory: wget security update","status":"published","published":"2024-09-16T02:23:12Z","modified":"2025-11-22T11:49:28Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2019-5953","description":"Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.","status":"published","published":"2019-04-04T00:00:00Z","modified":"2026-02-04T04:06:04.427663Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:21.741399Z"},{"id":"DLA-1760-1","title":"wget - security update","status":"published","published":"2019-04-22T00:00:00Z","modified":"2026-03-09T01:23:08.248795Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4425-1","title":"wget - security update","status":"published","published":"2019-04-05T00:00:00Z","modified":"2026-03-09T02:09:12.290201Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2019:1236-1","title":"Security update for wget","description":"This update for wget fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution (bsc#1131493).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-18T13:03:24Z","modified":"2025-05-02T04:30:17.699682Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11510-1","title":"wget-1.21.1-2.2 on GA media","description":"These are all security issues fixed in the wget-1.21.1-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:17:43.041338Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:0925-1","title":"Security update for wget","description":"This update for wget fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution (bsc#1131493).\n","status":"published","published":"2019-04-10T14:32:53Z","modified":"2026-02-04T04:37:38.430128Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0956-1","title":"Security update for wget","description":"This update for wget fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution (bsc#1131493).\n","status":"published","published":"2019-04-16T11:08:08Z","modified":"2026-02-04T04:40:07.605813Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3943-1","title":"wget vulnerabilities","description":"It was discovered that Wget incorrectly handled certain inputs.\nAn attacker could possibly use this issue to access sensitive\ninformation. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 18.10. (CVE-2018-20483)\n\nKusano Kazuhiko discovered that Wget incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2019-5953)\n","status":"published","published":"2019-04-08T23:52:29Z","modified":"2026-02-10T04:41:31Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}