PT-2018-1898

Name of the Vulnerable Software and Affected Versions GNU Patch version 2.7.6 Description The issue is related to an input validation vulnerability in GNU Patch when processing patch files, specifically with the EDITOR PROGRAM invocation using ed. This can result in code execution. The...

Null pointer dereference

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...

AZL-6787 CVE-2018-6951 affecting package patch for versions less than 2.7.6-7

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...

ALPINE-CVE-2016-10713

An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pchwriteline in pch.c can possibly lead to DoS via a crafted input file...

AZL-35103 CVE-2018-6951 affecting package patch for versions less than 2.7.6-9

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...

Out-of-bounds

An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pchwriteline in pch.c can possibly lead to DoS via a crafted input file...

CVE-2016-10713

An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pchwriteline in pch.c can possibly lead to DoS via a crafted input file...

CVE-2018-6951

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...

AZL-6788 CVE-2018-6952 affecting package patch for versions less than 2.7.6-7

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

Double free

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

ALPINE-CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

DEBIAN-CVE-2018-6951

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...

CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2018-6951

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...

AZL-35104 CVE-2018-6952 affecting package patch for versions less than 2.7.6-9

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2016-10713

CVE-2016-10713 affects GNU patch up to version 2.7.6, with an out-of-bounds access in pch_write_line() in pch.c that can cause a DoS via a crafted patch file. Several connected advisories note fixes/patches (e.g., Oracle Linux ELSA-2019-2033, EulerOS advisories) and reference that the vulnerable ...

CVE-2018-6951

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...

CVE-2016-10713

An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pchwriteline in pch.c can possibly lead to DoS via a crafted input file...