8.8

CVE-2016-4971: canonical ubuntu_linux

CVSS: 8.8v3.1HighModified
AliasesALPINE-CVE-2016-4971RHSA-2016:2587UBUNTU-CVE-2016-4971
Published 30-06-2016Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2016-4971 is a high (CVSS 8.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 46.06% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk
54/100
0100
High · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (NVD)
EPSS score
46.06%
0%100%
High · -0.15 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits4reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 4 · Related 3
MGASA-2016-0323OPENSUSE-SU-2024:10263-1SUSE-SU-2016:2226-1SUSE-SU-2016:2358-1

Timeline

  1. 30-06-2016
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

CVSS metrics

7 scores · 5 sources · 3 versions

EPSS trend

Probability

46.06%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

-0.15 pp

From 46.21% on 18-09-2026

18-09-202618-10-2026
EPSS score
46.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found
  • referenceUnverified

    Exploit Reference (bugzilla.redhat.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (packetstormsecurity.com)

    Maturity: unknown

  • exploit-databaseremotelinuxUnverified

    GNU Wget < 1.18 - Arbitrary File Upload (2)

    Maturity: poc

Show all 4 exploits
  • exploit-databaseremotelinuxVerified

    GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution

    Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat2 products
  • wget< 0:1.14-13.el7
  • wget-debuginfo< 0:1.14-13.el7
Alpine1 product
  • wget< 1.17.1-r1
Canonical1 product
Debian1 product
  • wget< 1.18-1 | < 1.13.4-3+deb7u3
Gnu1 product
Oracle1 product
Paloaltonetworks1 product
  • pan-os≥ 6.1.0, ≤ 6.1.16 | ≥ 7.0.0, ≤ 7.0.14 | ≥ 7.1.0, ≤ 7.1.9
Ubuntu1 product
  • wget< 1.15-1ubuntu1.14.04.2 | < 1.17.1-1ubuntu1.1

8 vendors · 9 products

References

25 links
Show all 25 references