Lucene search
K

6 matches found

Veracode
Veracode
added 2021/06/22 7:21 p.m.27 views

Denial Of Service (DoS)

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

7.5CVSS2.6AI score0.11805EPSS
Exploits1References6Affected Software1
AlpineLinux
AlpineLinux
added 2020/03/25 4:44 p.m.36 views

CVE-2019-20633

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

5.5CVSS6.5AI score0.00115EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2019/10/10 4:15 a.m.33 views

CVE-2018-1000156

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's...

9.3CVSS4.9AI score0.36762EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2018/11/21 12:0 a.m.28 views

EulerOS Virtualization 2.5.1 : patch (EulerOS-SA-2018-1378)

According to the version of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM...

9.3CVSS7.6AI score0.36762EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/05/29 12:0 a.m.22 views

EulerOS 2.0 SP2 : patch (EulerOS-SA-2018-1147)

According to the version of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed ca...

9.3CVSS7.6AI score0.36762EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2018/04/06 1:0 p.m.38 views

CVE-2018-1000156

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's...

7.8CVSS8.1AI score0.36762EPSS
Exploits0
Rows per page
Query Builder