CVE-2019-13636

Mô tả

Tham khảo

• packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html
• git.savannah.gnu.org/cgit/patch.git/commit · Mailing List
• irsl/gnu-patch-vulnerabilities
• lists.debian.org/debian-lts-announce/2019/07/msg00016.html · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVWWGISFWACROJJPVJJL4UBLVZ7LPOLT
• seclists.org/bugtraq/2019/Aug/29
• seclists.org/bugtraq/2019/Jul/54
• security.gentoo.org/glsa/201908-22
• security.netapp.com/advisory/ntap-20190828-0001
• usn.ubuntu.com/4071-1
• usn.ubuntu.com/4071-2
• debian.org/security/2019/dsa-4489

Lỗ hổng khác của patch

• CVE-2026-56289TRUNG BÌNH 5.5GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in un…
• CVE-2026-56288TRUNG BÌNH 5.5GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of cons…
• CVE-2021-45261TRUNG BÌNH 5.5An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
• CVE-2019-20633TRUNG BÌNH 5.5GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a deni…
• CVE-2015-1396CAO 7.5A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attac…