Summary
It was discovered that Patch incorrectly handled certain files. An attacker
could possibly use this to cause a denial of service. (CVE-2016-10713)
It was discovered that Patch incorrectly handled certain input validation. An
attacker could possibly use this to execute arbitrary code. (CVE-2018-1000156)
It was discovered that Patch incorrectly handled certain inputs. An attacker
could possibly use this to cause a denial of service. (CVE-2018-6951)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | patch | 2.7.1-4ubuntu2.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | patch | 2.7.5-1ubuntu0.16.04.1 |
Vulnerabilities 3
-
Unscored —
An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly l…
-
Unscored —
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR…
-
Unscored —
An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer deref…