Critical severity9.8NVD Advisory· Published May 17, 2019· Updated Jun 17, 2026

CVE-2019-5953

Description

Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Wget2 versions
cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*range: <=1.20.1
- (no CPE)range: <=1.20.1
osv-coords17 versions
pkg:rpm/opensuse/wget&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/wget&distro=openSUSE%20Tumbleweed pkg:rpm/suse/wget&distro=SUSE%20Enterprise%20Storage%204 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/wget&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/wget&distro=SUSE%20OpenStack%20Cloud%207
< 1.19.5-lp150.7.1+ 16 more
- (no CPE)range: < 1.19.5-lp150.7.1
- (no CPE)range: < 1.21.1-2.2
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.19.5-3.6.2
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
- (no CPE)range: < 1.14-21.10.1
Gnu Project/Gnu Wgetv5
Range: 1.20.1 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN25261088/index.htmlnvdThird Party Advisory
www.gnu.org/software/wget/nvdProduct
access.redhat.com/errata/RHSA-2019:2979nvd
access.redhat.com/errata/RHSA-2019:3168nvd
security.gentoo.org/glsa/201908-19nvd
support.f5.com/csp/article/K14560101nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000