RHEL 7 : patch (RHSA-2019:3758)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3758 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes...

Validation Bypass

patch is vulnerable to validation bypass. Strings beginning with the ! character are not blocked in the function doedscript in pch.c, potentially allowing bypass of string validations...

Important: Red Hat Security Advisory: patch security update

An update for patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Scientific Linux Security Update : patch on SL7.x x86_64 (20190806)

Security Fixes : - patch: Out-of-bounds access in pchwriteline function in pch.c CVE-2016-10713 - patch: Double free of memory in pch.c:anotherhunk causes a crash CVE-2018-6952 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

CVE-2018-20969

doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter...

CVE-2018-20969

doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter...

UBUNTU-CVE-2018-20969

doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter...

CVE-2018-20969

doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter...

CVE-2018-20969

CVE-2018-20969 / CVE-2019-13638 (GNU patch) : The vulnerability resides in do_ed_script in pch.c of GNU patch up to version 2.7.6, where do_ed_script does not block strings starting with a ! character when using ed-style payloads. This is tied to an upstream commit shared with CVE-2019-13638 and ...

PT-2020-10609 · Gnu +2 · Gnu Patch +2

Name of the Vulnerable Software and Affected Versions: GNU patch versions prior to 2.7.7 Description: The issue is related to a Double Free vulnerability in the another hunk function in pch.c, which can cause a denial of service via a crafted patch file. Recommendations: For GNU patch versions...

UBUNTU-CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

Double free

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

Null pointer dereference

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...

DEBIAN-CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

AZL-35104 CVE-2018-6952 affecting package patch for versions less than 2.7.6-9

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

CVE-2018-6952

The CVE-2018-6952 entry refers to a double-free vulnerability in the function another_hunk of pch.c in GNU patch up to version 2.7.6. Exploitation could crash the patch utility or cause denial of service. Connected advisories indicate patched versions are available and advisories recommend updati...