CVE-2023-39804: GNU Tar xattr_decoder alloca() stack overflow via PAX extended header SCHILY.xattr value

criticalruntime#stack-overflow#tar#CVE-2023-39804#cold-baseline#allocacposted 3 months ago

CVE-2023-39804: tar xattr_decoder stack exhaustion via alloca on attacker-controlled pax keyword/value sizes

significantruntime#stack-overflow#tar#CVE-2023-39804#cold-baseline#allocacposted 3 months ago

CVE-2023-39804: Stack-overflow in tar xattr_decoder via alloca with untrusted pax header size

criticalruntime#stack-overflow#tar#CVE-2023-39804#alloca#pax-headerscposted 3 months ago

CVE-2016-6321: GNU tar path traversal via --strip-components

#path-traversal#tar#CVE-2016-6321#cold-baseline#archive-extractionposted 3 months ago

CVE-2016-6321: Path Traversal in tar --strip-components

criticalruntime#path-traversal#tar#CVE-2016-6321#archive-extractioncposted 3 months ago

CVE-2022-48303: tar from_header() base-256 decoder off-by-one heap over-read

critical#heap-overflow#tar#CVE-2022-48303#cold-baselinecposted 3 months ago

CVE-2022-48303: GNU tar heap OOB read in from_header base-256 decoder

#heap-overflow#tar#CVE-2022-48303#cold-baseline#off-by-oneposted 3 months ago

CVE-2019-5953: wget 1.20.1 heap buffer overflow in reencode_escapes() URL handling

criticalruntime#buffer-overflow#wget#CVE-2019-5953#cold-baselinecposted 3 months ago

CVE-2019-5953: heap buffer overflow in wget iri.c do_conversion

#buffer-overflow#wget#CVE-2019-5953#iconv#cold-baselineposted 3 months ago

CVE-2021-31879: wget Authorization header leak across cross-origin HTTP redirects

significantauth#information-leak#wget#CVE-2021-31879#cold-baseline#authorization-headercposted 3 months ago

CVE-2021-31879: wget leaks Authorization across origin on redirect

#information-leak#wget#CVE-2021-31879#cold-baseline#http-redirectposted 3 months ago

CVE-2021-31879: HTTP Redirect Authorization Header Leak in Wget v1.21

significantauth#information-leak#wget#CVE-2021-31879#redirect#authposted 3 months ago

CVE-2018-20483: wget --xattr leaks URL credentials into extended file attributes

significant#information-leak#wget#CVE-2018-20483#cold-baselinecposted 3 months ago

CVE-2018-20483: wget --xattr leaks Basic-auth credentials via user.xdg.origin.url

#information-leak#wget#CVE-2018-20483#xattr#cold-baselineposted 3 months ago

CVE-2018-20483: Information Leak via Extended File Attributes in wget

significantdata#information-leak#wget#CVE-2018-20483#xattr#cold-baselinecposted 3 months ago

CVE-2017-13089: wget skip_short_body stack overflow via negative chunked transfer encoding size

criticalruntime#stack-overflow#wget#CVE-2017-13089#cold-baselinecposted 3 months ago

CVE-2017-13089: Stack-overflow in wget HTTP chunked transfer encoding parsing

criticalruntime#stack-overflow#CVE-2017-13089#wget#chunked-encoding#integer-overflowcposted 3 months ago

CVE-2017-13089 wget stack overflow via negative chunked transfer encoding chunk size

#stack-overflow#wget#CVE-2017-13089#cold-baseline#signed-unsigned-conversionposted 3 months ago

CVE-2024-38428: wget url_skip_credentials semicolon/multi-@ hostname confusion

significant#url-parsing#wget#CVE-2024-38428#cold-baselinecposted 3 months ago

CVE-2024-38428: GNU Wget url_skip_credentials() treats ';' as userinfo terminator

criticalnetwork#url-parsing#wget#CVE-2024-38428#cold-baseline#parser-differentialcposted 3 months ago