CVE-2016-4971

mediumPriorität · beachten · 61EPSS 0.461 · 99. PerzentilExploit · funktionalEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

5 exploits · funktional

Likely / severe?

46.1% (99th) EPSS

CVSS 4.3 · medium

Is it mine?

36 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-27

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenwget-0:1.14-13.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-debuginfo-0:1.14-13.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-debuginfo-0:1.14-13.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-debuginfo-0:1.14-13.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-debuginfo-0:1.14-13.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-debuginfo-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-debuginfo-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-debuginfo-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Behobenwget-debuginfo-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2587
Workaroundwget-0:1.14-13.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-debuginfo-0:1.14-13.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-debuginfo-0:1.14-13.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-debuginfo-0:1.14-13.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-debuginfo-0:1.14-13.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-debuginfo-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-debuginfo-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-debuginfo-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.
Workaroundwget-debuginfo-0:1.14-13.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Use wget with "-O" option to explicitly specify the output filename.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.3–8.8

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 2.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 5.9

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nsecondary · FSTEC (BDU) RU

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Psecondary · Red Hat Product Security US

v3.07highCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-254USCWE-73US

Exploits (5)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-40064GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Executionfunktional · exploit_db
EDB-49815GNU Wget < 1.18 - Arbitrary File Upload (2)PoC · exploit_db
dinidhu96/IT19013756_-CVE-2016-4971-dinidhu96/IT19013756_-CVE-2016-4971-PoC · poc_in_github
gitcollect/CVE-2016-4971CVE-2016-4971 written in nodejsPoC · poc_in_github
mbadanoiu/CVE-2016-4971CVE-2016-4971 Wget 1.18/1.14-13.el7 Client ExploitPoC · poc_in_github

betroffene Produkte (36)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
Canonical Ltd. Ubuntu≤ 16.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 15.10fstec_bduRU
Canonical Ltd. Ubuntu≤ 12.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 14.04 LTSfstec_bduRU
The GNU Project GNU Wget≤ 1.18fstec_bduRU
canonical ubuntu linux= 12.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 14.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 15.10nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 16.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
gnu wget< 1.18nvdUScpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*
oracle solaris= 10nvdUScpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
oracle solaris= 11.3nvdUScpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
paloaltonetworks pan-os6.1.0 → 6.1.16nvdUScpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
paloaltonetworks pan-os7.0.0 → 7.0.14nvdUScpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
paloaltonetworks pan-os7.1.0 → 7.1.9nvdUScpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
wget-0:1.14-13.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)alle Versionenfixedredhat_csafUS
wget-0:1.14-13.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)alle Versionenfixedredhat_csafUS
wget-0:1.14-13.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)alle Versionenfixedredhat_csafUS
wget-0:1.14-13.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)alle Versionenfixedredhat_csafUS

20 von 36 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2016:2587Red Hat Security Advisory: wget security and bug fix update2016-11-03csaf · redhat_csafUS
An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2016-06-30geändert 2026-06-17

Referenzen (42)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan