Lucene search

K
freebsdFreeBSD0D090952-600A-11E6-A6C3-14DAE9D210B8
HistoryAug 05, 2015 - 12:00 a.m.

FreeBSD -- shell injection vulnerability in patch(1)

2015-08-0500:00:00
vuxml.freebsd.org
16

0.01 Low

EPSS

Percentile

83.1%

Problem Description:
Due to insufficient sanitization of the input patch
stream, it is possible for a patch file to cause patch(1)
to pass certain ed(1) scripts to the ed(1) editor, which
would run commands.
Impact:
This issue could be exploited to execute arbitrary
commands as the user invoking patch(1) against a specially
crafted patch file, which could be leveraged to obtain
elevated privileges.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 10.1UNKNOWN
FreeBSDanynoarchfreebsd< 10.1_17UNKNOWN