K26311635 : Wget vulnerability CVE-2017-6508

Security Advisory Description

CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL. (CVE-2017-6508)
Impact
A remote attacker may be able to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.