csaf_suse - suse-su-2025:01921-1

SUSE-SU-2025:01921-1

Vulnerability from csaf_suse - Published: 2025-06-12 06:29 - Updated: 2025-06-12 06:29

Summary

Security update for wget

Notes

Title of the patch

Security update for wget

Description of the patch

This update for wget fixes the following issues: - CVE-2024-10524: Dropped support for shorthand URLs that enabled SSRF attacks (bsc#1233773).

Patchnames

SUSE-2025-1921,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-1921

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wget",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wget fixes the following issues:\n\n - CVE-2024-10524: Dropped support for shorthand URLs that enabled SSRF attacks (bsc#1233773).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-1921,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-1921",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_01921-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:01921-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202501921-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:01921-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040246.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1233773",
        "url": "https://bugzilla.suse.com/1233773"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-10524 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-10524/"
      }
    ],
    "title": "Security update for wget",
    "tracking": {
      "current_release_date": "2025-06-12T06:29:35Z",
      "generator": {
        "date": "2025-06-12T06:29:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:01921-1",
      "initial_release_date": "2025-06-12T06:29:35Z",
      "revision_history": [
        {
          "date": "2025-06-12T06:29:35Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wget-1.14-21.25.1.aarch64",
                "product": {
                  "name": "wget-1.14-21.25.1.aarch64",
                  "product_id": "wget-1.14-21.25.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wget-1.14-21.25.1.i586",
                "product": {
                  "name": "wget-1.14-21.25.1.i586",
                  "product_id": "wget-1.14-21.25.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wget-1.14-21.25.1.ppc64le",
                "product": {
                  "name": "wget-1.14-21.25.1.ppc64le",
                  "product_id": "wget-1.14-21.25.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wget-1.14-21.25.1.s390",
                "product": {
                  "name": "wget-1.14-21.25.1.s390",
                  "product_id": "wget-1.14-21.25.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wget-1.14-21.25.1.s390x",
                "product": {
                  "name": "wget-1.14-21.25.1.s390x",
                  "product_id": "wget-1.14-21.25.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wget-1.14-21.25.1.x86_64",
                "product": {
                  "name": "wget-1.14-21.25.1.x86_64",
                  "product_id": "wget-1.14-21.25.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wget-1.14-21.25.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:wget-1.14-21.25.1.x86_64"
        },
        "product_reference": "wget-1.14-21.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-10524",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-10524"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:wget-1.14-21.25.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-10524",
          "url": "https://www.suse.com/security/cve/CVE-2024-10524"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233256 for CVE-2024-10524",
          "url": "https://bugzilla.suse.com/1233256"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1233773 for CVE-2024-10524",
          "url": "https://bugzilla.suse.com/1233773"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:wget-1.14-21.25.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:wget-1.14-21.25.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-06-12T06:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-10524"
    }
  ]
}

CVE-2024-10524 (GCVE-0-2024-10524)

Vulnerability from cvelistv5 – Published: 2024-11-19 14:23 – Updated: 2025-03-21 18:03

Summary

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

JFROG

References

URL

Tags

	https://seclists.org/oss-sec/2024/q4/107	vendor-advisory
	https://jfrog.com/blog/cve-2024-10524-wget-zero-d…	third-party-advisory
	https://git.savannah.gnu.org/cgit/wget.git/commit…	patch

Impacted products

	Vendor	Product	Version
	gnu	wget	Affected: 0 , < 1.25.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-03-21T18:03:44.339Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/11/18/6"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20250321-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:gnu:wget:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "wget",
            "vendor": "gnu",
            "versions": [
              {
                "lessThan": "1.25.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-10524",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-19T15:19:46.827592Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-19T15:20:48.148Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "wget",
          "vendor": "gnu",
          "versions": [
            {
              "lessThan": "1.25.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eApplications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918 Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-19T14:23:09.718Z",
        "orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d",
        "shortName": "JFROG"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://seclists.org/oss-sec/2024/q4/107"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d",
    "assignerShortName": "JFROG",
    "cveId": "CVE-2024-10524",
    "datePublished": "2024-11-19T14:23:09.718Z",
    "dateReserved": "2024-10-30T08:59:30.617Z",
    "dateUpdated": "2025-03-21T18:03:44.339Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

SUSE-SU-2025:01921-1

CVE-2024-10524 (GCVE-0-2024-10524)

Tags

Sightings

Nomenclature