GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

GNU patch 2.7.6 enables shell injection via crafted patch with ed style payload, ed not required.

Reporter	Title	Published	Views	Family All 272
IBM Security Bulletins	Security Bulletin: A vulnerability in patch affects PowerKVM	7 Jul 201800:04	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Libvorbis, Patch and Python-paramiko vulnerabilities affect IBM Netezza Host Management	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities (patch) vulnerability	19 Dec 201820:15	–	ibm
FreeBSD	patch -- multiple vulnerabilities	16 Apr 201800:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : patch (ALAS-2018-1008)	11 May 201800:00	–	nessus
Tenable Nessus	Amazon Linux 2 : patch (ALAS-2019-1317)	25 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : patch (ALAS-2018-1008)	11 May 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : patch (ALAS-2019-1312)	28 Oct 201900:00	–	nessus
Tenable Nessus	CentOS 8 : patch (CESA-2019:2798)	29 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 6 : patch (CESA-2018:1199)	3 May 201800:00	–	nessus