Bug 1328137 (CVE-2016-7098) - CVE-2016-7098 wget: files rejected by access list are kept on the disk for the duration of HTTP connection
Summary: CVE-2016-7098 wget: files rejected by access list are kept on the disk for th...
Alias: CVE-2016-7098
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
Depends On:
Blocks: 1328140
TreeView+ depends on / blocked
Reported: 2016-04-18 14:41 UTC by Andrej Nemec
Modified: 2021-02-17 04:02 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2016-07-22 04:51:56 UTC

Attachments (Terms of Use)

Description Andrej Nemec 2016-04-18 14:41:23 UTC
A possible vulnerability was found in wget. The vulnerability surfaces when wget is used to download a single file with recursive option (-r / -m) and an access list ( -A ), wget only applies the list at the end of the download process.

Although the file get successfully deleted in the end, this creates a race condition situation as an attacker who has control over the URL, could slow down the download process so that he had a chance to make use of the malicious file before it gets deleted.

Comment 2 Dhiru Kholia 2016-08-12 04:17:12 UTC
Public via http://www.openwall.com/lists/oss-security/2016/08/12/2

Comment 3 Andrej Nemec 2016-08-29 06:47:16 UTC
CVE assignment:


Comment 4 Doran Moppert 2020-02-11 00:29:39 UTC

Red Hat Product Security determined that this flaw was not a security vulnerability. See the Bugzilla link for more details.

Note You need to log in before you can comment on or make changes to this bug.