CVE-2018-1000156 - Vulncode-DB

GNU patch is processd by ed. This allows arbitrary command executions through a line beginning with !

Products	Ubuntu_linux, Debian_linux, Patch, Enterprise_linux_desktop, Enterprise_linux_server, Enterprise_linux_server_aus, Enterprise_linux_server_eus, Enterprise_linux_server_tus, Enterprise_linux_workstation
Type	Improper Input Validation (CWE-20)
First patch	https://git.savannah.gnu.org/cgit/patch.git/commit/?id=123eaff0d5d1aebe128295959435b9ca5909c26d
Relevant file/s	• ./src/pch.c (modified, +67, -26) • ./tests/Makefile.am (modified, +1) • ./tests/ed-style (added, +41)
Links	• https://access.redhat.com/errata/RHSA-2018:1199 • https://access.redhat.com/errata/RHSA-2018:1200 • https://access.redhat.com/errata/RHSA-2018:2091 • https://access.redhat.com/errata/RHSA-2018:2097 • https://access.redhat.com/errata/RHSA-2018:2092 More/Less (13) • http://rachelbythebay.com/w/2018/04/05/bangpatch/ • https://usn.ubuntu.com/3624-1/ • https://security.gentoo.org/glsa/201904-17 • https://lists.debian.org/debian-lts-announce/2018/04/msg00013.html • https://twitter.com/kurtseifried/status/982028968877436928 • https://access.redhat.com/errata/RHSA-2018:2094 • https://usn.ubuntu.com/3624-2/ • https://access.redhat.com/errata/RHSA-2018:2095 • https://savannah.gnu.org/bugs/index.php?53566 • https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894667#19 • https://access.redhat.com/errata/RHSA-2018:2093 • https://seclists.org/bugtraq/2019/Jul/54 • https://access.redhat.com/errata/RHSA-2018:2096

patch.git - Tree: 123eaff0d5

(? files)

Filter Settings

All Files

Relevant Files

Vulnerable Files

Patched Files

Files

VS-Dark VS-Bright Monokai Darcula

Navigation

Patch data:

(on by default)

Patched area: