High severity7.8NVD Advisory· Published Feb 5, 2018· Updated Jun 17, 2026

CVE-2015-1416

Description

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSDinferred2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, 10.1 before 10.1-RELEASE-p16
GNU/Patchllm-fuzzy
Range: <2.2.5

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2015/07/30/9nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2015/08/01/4nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2015/08/02/1nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2015/08/02/6nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/76116nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1033110nvdThird Party AdvisoryVDB Entry
www.freebsd.org/security/advisories/FreeBSD-SA-15:14.bsdpatch.ascnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.003
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000