PT-2017-18259

Name of the Vulnerable Software and Affected Versions dpkg versions 1.3.0 through 1.18.23 Description The issue allows remote attackers to conduct directory traversal attacks via a crafted Debian source package. This is possible because dpkg-source in dpkg does not offer a protection mechanism fo...

PT-2015-5263

Name of the Vulnerable Software and Affected Versions GNU patch versions prior to 2.7.4 Description A Directory Traversal issue allows a remote attacker to write to arbitrary files via a symlink attack in a patch file. This issue exists due to an incomplete fix for a previous problem...

CVE-2015-1396

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...

UBUNTU-CVE-2015-1396

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...

GNU patch 'set_hunkmax()' function denial of service vulnerability

The GNU Coreutils are the basic file, shell and text manipulation tools used by the GNU operating system. A denial of service vulnerability exists in the GNU patch 'sethunkmax' function, which can be exploited by an attacker to cause an application to crash by denying legitimate users...

CVE-2015-1196

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...

DEBIAN-CVE-2015-1196

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...

CVE-2015-1196

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...

CVE-2015-1196

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...

CVE-2015-1196

CVE-2015-1196 is confirmed in the provided documents as a vulnerability in GNU patch 2.7.1 where a symlink attack in a patch file allows remote attackers to write to arbitrary files. The connected advisories/feeds reference this CVE alongside other patches for GNU patch (e.g., CVE-2014-9637, CVE-...

CVE-2015-1196

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...

PT-2015-3303

Name of the Vulnerable Software and Affected Versions GNU Patch versions prior to 2.7.3 Description The issue is related to a directory traversal vulnerability in GNU Patch, which affects versions that support Git-style patching. This vulnerability can be exploited by a remote attacker to modify...

PT-2015-5158

Name of the Vulnerable Software and Affected Versions GNU patch version 2.7.1 Description The issue allows remote attackers to write to arbitrary files via a symlink attack in a patch file. Recommendations For GNU patch version 2.7.1, update to a newer version that contains a fix for this issue...

UBUNTU-CVE-2015-1196

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...

CVE-2015-1196: Improper Link Resolution Before File Access

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...

Oracle Solaris Third-Party Patch Update : gnu-patch (multiple_vulnerabilities_in_gnu_patch)

The remote Solaris system is missing necessary patches to address security updates : - Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-forma...

PT-2014-1974

Name of the Vulnerable Software and Affected Versions GNU patch versions 2.7.2 and earlier Description The issue is related to errors in resource management, specifically memory consumption, which can lead to a denial of service. This can be triggered by a remote attacker using a crafted diff fil...

UBUNTU-CVE-2014-9637

GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service memory consumption and segmentation fault via a crafted diff file...

DEBIAN-CVE-2010-4651

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. dot dot or full pathname, a related issue to CVE-2010-1679...

CVE-2010-4651

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. dot dot or full pathname, a related issue to CVE-2010-1679...