Lucene search
Ubuntu.comUB:CVE-2018-6952HistoryFeb 13, 2018 - 12:00 a.m.
CVE-2018-6952
2018-02-1300:00:00
ubuntu.com
ubuntu.com
13
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.035
Percentile
91.5%
A double free exists in the another_hunk function in pch.c in GNU patch
through 2.7.6.
Bugs
- <https://savannah.gnu.org/bugs/index.php?53133>
- <https://savannah.gnu.org/bugs/index.php?56683 (regression)>
Notes
| Author | Note |
|---|---|
| mdeslaur | The patch for this introduced CVE-2019-20633, and no complete fix is available from upstream as of 2023-09-26 |
Related
osv
osv
CVE-2019-20633
2020-03-25 17:15:14
CGA-x3gf-54pw-xf6f
2024-06-06 12:29:53
CVE-2018-6952
2018-02-13 19:29:00
cvelist
cvelist
CVE-2019-20633
2020-03-25 16:44:49
CVE-2018-6952
2018-02-13 19:00:00
redhatcve
redhatcve
CVE-2019-20633
2020-03-30 18:31:23
CVE-2018-6952
2018-02-14 07:48:58
debiancve
debiancve
CVE-2019-20633
2020-03-25 17:15:14
CVE-2018-6952
2018-02-13 19:29:00
nvd
nvd
CVE-2019-20633
2020-03-25 17:15:14
CVE-2018-6952
2018-02-13 19:29:00
veracode
veracode
Denial Of Service (DoS)
2021-06-22 19:21:10
Denial Of Service (DoS)
2019-08-08 00:07:23
alpinelinux
alpinelinux
CVE-2019-20633
2020-03-25 17:15:14
CVE-2018-6952
2018-02-13 19:29:00
prion
prion
Double free
2020-03-25 17:15:00
Double free
2018-02-13 19:29:00
cve
cve
CVE-2019-20633
2020-03-25 17:15:14
CVE-2018-6952
2018-02-13 19:29:00
ubuntucve
ubuntucve
CVE-2019-20633
2020-03-25 00:00:00
kitploit
kitploit
UAFuzz - Binary-level Directed Fuzzing For Use-After-Free Vulnerabilities
2020-11-24 20:30:00
nessus
nessus
RHEL 8 : patch (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 6 : patch (Unpatched Vulnerability)
2024-05-11 00:00:00
Photon OS 5.0: Patch PHSA-2024-5.0-0201
2024-07-24 00:00:00
wolfi
wolfi
CVE-2019-20633 vulnerabilities
2024-07-26 21:09:29
CVE-2018-6952 vulnerabilities
2024-07-26 21:09:29
cgr
cgr
CVE-2019-20633 vulnerabilities
2024-05-19 03:07:16
CVE-2018-6952 vulnerabilities
2024-05-19 03:07:16
cbl_mariner
cbl_mariner
CVE-2019-20633 affecting package patch 2.7.6-7
2024-07-26 21:09:32
CVE-2019-20633 affecting package patch 2.7.6-8
2024-07-26 21:09:36
CVE-2018-6952 affecting package patch for versions less than 2.7.6-9
2024-03-19 17:21:46
fedora
fedora
[SECURITY] Fedora 29 Update: patch-2.7.6-7.fc29
2018-10-30 17:45:32
[SECURITY] Fedora 28 Update: patch-2.7.6-5.fc28
2018-10-15 10:47:23
[SECURITY] Fedora 26 Update: patch-2.7.6-3.fc26
2018-03-20 17:37:23
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2018-1.0-0189
2018-10-16 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2018-2.0-0102
2018-10-16 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0201
2024-02-08 00:00:00
openvas
openvas
Fedora Update for patch FEDORA-2018-90af6f5b8a
2019-05-07 00:00:00
Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2019-1863)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2019-1801)
2020-01-23 00:00:00
oraclelinux
oraclelinux
patch security and bug fix update
2019-08-13 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1946
2021-07-02 17:39:56
mageia
mageia
Updated patch packages fix security vulnerabilities
2018-11-16 01:04:32
redhat
redhat
(RHSA-2019:2033) Low: patch security and bug fix update
2019-08-06 07:53:04
archlinux
archlinux
[ASA-201811-14] patch: multiple issues
2018-11-12 00:00:00
[ASA-201810-8] patch: multiple issues
2018-10-09 00:00:00
centos
centos
patch security update
2019-08-30 03:51:18
suse
suse
Security update for patch (moderate)
2022-06-02 00:00:00
gentoo
gentoo
Patch: Multiple vulnerabilities
2019-04-17 00:00:00
freebsd
freebsd
patch -- multiple vulnerabilities
2018-04-16 00:00:00
amazon
amazon
Important: patch
2019-10-21 18:01:00
Important: patch
2019-10-18 23:22:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.035
Percentile
91.5%
Related for UB:CVE-2018-6952