PT-2018-3865 · Gnu+5 · Gnu Patch+5

Hanno + 1 · Published 2018-02-12 · Updated 2026-04-01 · CVE-2018-6952

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GNU patch versions through 2.7.6

Description A double free issue exists in the another hunk function in pch.c, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For GNU patch versions through 2.7.6, update to a version later than 2.7.6 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALT-PU-2018-1872

ALT-PU-2018-2971

AZL-35104

AZL-6788

BDU:2023-01649

CESA-2019_2033

CLEANSTART-2026-PM79547

CVE-2018-6952

ECHO-2151-2F9C-CEA7

MGASA-2018-0448

OPENSUSE-SU-2022_1925-1

OPENSUSE-SU-2024:12060-1

RHSA-2019:2033

RHSA-2019_2033

SUSE-SU-2022:1925-1

SUSE-SU-2022:1932-1

SUSE-SU-2022_1925-1

SUSE-SU-2022_1932-1

Affected Products

Alt Linux

Centos

Debian

Gnu Patch

Red Hat

Suse

References · 51

• https://access.redhat.com/errata/RHSA-2019:2033 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01649 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/DTAZPKCAJTAOK6CYQP7SPWNXDIAG4A37 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-2033.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-6788 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-35104 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-6952 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6952 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20633 · Security Note
• https://savannah.gnu.org/bugs/index.php?53133 · Vendor Advisory
• https://security.gentoo.org/glsa/201904-17 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-6952 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-6952 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-20969 · Security Note