PT-2018-3868 · Gnu+4 · Gnu Patch+4
Hanno
+1
·
Publicado
2018-02-12
·
Atualizado
2025-08-12
·
CVE-2018-6951
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GNU patch versions prior to 2.7.7
Description
The issue is related to a segmentation fault and a NULL pointer dereference in the
intuit diff type() function in pch.c, which can lead to a denial of service. This is also referred to as a "mangled rename" issue. The vulnerability can be exploited by a remote attacker to cause a denial of service.Recommendations
For GNU patch versions prior to 2.7.7, update to version 2.7.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the
intuit diff type() function in pch.c to minimize the risk of exploitation.Correção
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Debian
Gnu Patch
Suse
Ubuntu