← All advisories

High severity7.5NVD Advisory· Published Feb 13, 2018· Updated Jun 17, 2026

CVE-2018-6952

CVE-2018-6952

Description

A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12

GNU/Patchllm-fuzzy
Range: <=2.7.6
osv-coords11 versions
pkg:apk/chainguard/patch pkg:apk/chainguard/patch-doc pkg:apk/wolfi/patch pkg:apk/wolfi/patch-doc pkg:rpm/opensuse/patch&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/patch&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/patch&distro=openSUSE%20Tumbleweed pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
< 2.7.6-r3+ 10 more
- (no CPE)range: < 2.7.6-r3
- (no CPE)range: < 2.7.6-r3
- (no CPE)range: < 2.7.6-r3
- (no CPE)range: < 2.7.6-r3
- (no CPE)range: < 2.7.6-150000.5.3.1
- (no CPE)range: < 2.7.6-150000.5.3.1
- (no CPE)range: < 2.7.6-5.1
- (no CPE)range: < 2.7.6-150000.5.3.1
- (no CPE)range: < 2.7.6-150000.5.3.1
- (no CPE)range: < 2.7.5-8.8.1
- (no CPE)range: < 2.7.5-8.8.1

Patches

Vulnerability mechanics

References

3

www.securityfocus.com/bid/103047nvdThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2019:2033nvd
security.gentoo.org/glsa/201904-17nvd

News mentions

0

No linked articles in our index yet.