rpm package
suse/patch&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3
pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-1000156 | Hig | 7.8 | < 2.7.5-8.5.1 | 2.7.5-8.5.1 | Apr 6, 2018 | GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is simil | |
| CVE-2018-6951 | Hig | 7.5 | < 2.7.5-8.5.1 | 2.7.5-8.5.1 | Feb 13, 2018 | An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue. | |
| CVE-2016-10713 | Med | 5.5 | < 2.7.5-8.5.1 | 2.7.5-8.5.1 | Feb 13, 2018 | An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file. |
- affected < 2.7.5-8.5.1fixed 2.7.5-8.5.1
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is simil
- affected < 2.7.5-8.5.1fixed 2.7.5-8.5.1
An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.
- affected < 2.7.5-8.5.1fixed 2.7.5-8.5.1
An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.