EUVD-2015-1553

Malware in sbrugna...

EUVD-2019-5066

Malware in sbrugna...

patch: OS shell command injection when processing crafted patch files

A flaw was found in GNU patch through version 2.7.6. An ed-style diff payload patch file with shell metacharacters can be used to inject OS shell commands into a system. The ed editor does not need to be present on the vulnerable system for this attack to function. The highest threat from this...

CVE-2016-10713

A heap-based out-of-bounds read flaw was found in the way the patch utility parsed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patch files...

OpenBSD patch arbitrary command execution vulnerability

OpenBSD is a BSD-based operating system. OpenBSD fails to properly filter filter input patch streams, allowing a remote attacker to create specially crafted patch files that the target user processes and can run arbitrary commands...