PT-2019-10405 · Gnu+3 · Gnu Patch+3

Imre Rad · Publicado 2018-06-08 · Atualizado 2026-04-01 · CVE-2018-20969

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNU patch versions through 2.7.6

Description The issue is related to the do ed script function in pch.c, which fails to block strings starting with a ! character. This syntax is specific to ed and is unrelated to shell metacharacters.

Recommendations For GNU patch versions through 2.7.6, update to a version that contains a fix for this issue.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

ALT-PU-2018-1872

AZL-35102

AZL-6786

CESA-2019_2798

CESA-2019_2964

CLEANSTART-2026-PM79547

CVE-2018-20969

DLA-1864-1

DSA-4489-1

MGASA-2020-0093

RHSA-2019:2798

RHSA-2019:2964

RHSA-2019:3757

RHSA-2019:3758

RHSA-2019:4061

RHSA-2019_2798

RHSA-2019_2964

ROSA-SA-2024-2468

USN-4071-1

USN-4071-2

Produtos afetados

Alt Linux

Centos

Gnu Patch

Red Hat

Referências · 44

• 🔥 https://seclists.org/bugtraq/2019/Aug/29 · Exploit
• https://github.com/irsl/gnu-patch-vulnerabilities · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PM79547.json · Nota
• https://ubuntu.com/security/CVE-2019-13636 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4489-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-20969 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-20969 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2018-20969 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:4061 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4071-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-20969 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:3757 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2019-2798.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:2798 · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2018-20969 · Nota