USN-6852-1

Details

It was discovered that Wget incorrectly handled semicolons in the userinfo subcomponent of a URI. A remote attacker could possibly trick a user into connecting to a different host than expected.

Affected Packages

wget

Ubuntu 20.04 LTS

Fixed in:

1.20.3-1ubuntu2.1

wget

Ubuntu 22.04 LTS

Fixed in:

1.21.2-2ubuntu1.1

wget

Ubuntu 24.04 LTS

Fixed in:

1.21.4-1ubuntu4.1

References

REPORT

https://ubuntu.com/security/CVE-2024-38428

ADVISORY

https://ubuntu.com/security/notices/USN-6852-1