Every CVE Search/ Get API key

CVE-2018-6951

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated...

7.5 HighFix available

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

8.36%Up 6.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
CVE-2018-6951
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
CVE-2018-6951
Updated
2026-11-02
EUVDEUVD-2018-18695 No score

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
EUVD-2018-18695
Updated
2026-11-03
GitHub AdvisoriesGHSA-jx75-987w-4cqc 7.5

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated...

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
GHSA-jx75-987w-4cqc
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVALPINE-CVE-2018-6951 7.5

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
ALPINE-CVE-2018-6951
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-35103 7.5

CVE-2018-6951 affecting package patch for versions less than 2.7.6-9

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
AZL-35103
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
Show 12 moreShow less
OSVAZL-6787 7.5

CVE-2018-6951 affecting package patch for versions less than 2.7.6-7

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
AZL-6787
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2018-6951 7.5

CVE-2018-6951 does not affect BellSoft software

Record
BELL-CVE-2018-6951
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
CVE-2018-6951
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-6951 7.5

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
DEBIAN-CVE-2018-6951
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-14 7.5

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
JLSEC-2026-14
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVUBUNTU-CVE-2018-6951 7.5

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Record
UBUNTU-CVE-2018-6951
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2018-0277 No score

Updated patch packages fix security vulnerabilities

Updated patch package fixes security vulnerabilities:

It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this to cause a denial of service (CVE-2016-10713).

It was discovered that Patch incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service (CVE-2018-6951).

It was discovered that Patch incorrectly handled certain input validation. An attacker could possibly use this to execute arbitrary code (CVE-2018-1000156).

Record
MGASA-2018-0277
Updated
2026-11-02
OSVMGASA-2018-0448 No score

Updated patch packages fix security vulnerabilities

A NULL pointer dereference flaw was found in the way patch processed patch files. An attacker could potentially use this flaw to crash patch by tricking it into processing crafted patches (CVE-2018-6951).

A double-free flaw was found in the way the patch utility processed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches (CVE-2018-6952).

Record
MGASA-2018-0448
Updated
2026-11-02
OSVopenSUSE-SU-2024:11151-1 No score

patch-2.7.6-3.43 on GA media

These are all security issues fixed in the patch-2.7.6-3.43 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11151-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2018-6951 No score

CVE-2018-6951 in patch - Patched by Root

Root has patched CVE-2018-6951 in the patch package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2018-6951
Updated
2026-11-02
OSVSUSE-SU-2018:1128-1 No score

Security update for patch

This update for patch fixes the following issues:

Security issues fixed:

  • CVE-2018-1000156: Malicious patch files cause ed to execute arbitrary commands (bsc#1088420).
  • CVE-2018-6951: Fixed NULL pointer dereference in the intuit_diff_type function in pch.c (bsc#1080918).
  • CVE-2016-10713: Fixed out-of-bounds access within pch_write_line() in pch.c (bsc#1080918).
Record
SUSE-SU-2018:1128-1
Updated
2026-11-02
OSVUSN-3624-1 No score

patch vulnerabilities

It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this to cause a denial of service. (CVE-2016-10713)

It was discovered that Patch incorrectly handled certain input validation. An attacker could possibly use this to execute arbitrary code. (CVE-2018-1000156)

It was discovered that Patch incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service. (CVE-2018-6951)

Record
USN-3624-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
patch
Alpine:v3.10
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.11
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.12
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.13
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.14
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.15
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.16
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.17
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.18
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.19
 before 2.7.6-r2
2.7.6-r2
Show 30 moreShow less
Affected packages
PackageAffectedFixed
patch
Alpine:v3.20
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.21
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.22
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.23
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.24
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.4
 before 2.7.5-r2
2.7.5-r2
patch
Alpine:v3.5
 before 2.7.5-r2
2.7.5-r2
patch
Alpine:v3.6
 before 2.7.5-r2
2.7.5-r2
patch
Alpine:v3.7
 before 2.7.5-r2
2.7.5-r2
patch
Alpine:v3.8
 before 2.7.6-r2
2.7.6-r2
patch
Alpine:v3.9
 before 2.7.6-r2
2.7.6-r2
patch
Azure Linux:3
 before 2.7.6-9
2.7.6-9
patch
Azure Linux:2
 before 2.7.6-7
2.7.6-7
patch
Debian:12
 All versions, plus listed versions
2.7.6-72.8-12.8-2
 None known
patch
Debian:13
 All versions, plus listed versions
2.8-2
 None known
patch
Debian:14
 All versions, plus listed versions
2.8-2
 None known
patch_jll
Julia
 before 2.8.0+0
2.8.0+0
patch
Mageia:5
From an advisory covering 3 CVEs
 before 2.7.6-1.mga5
2.7.6-1.mga5
patch
Mageia:6
From an advisory covering 3 CVEs
 before 2.7.6-1.mga6
2.7.6-1.mga6
patch
Mageia:6
From an advisory covering 2 CVEs
 before 2.7.6-1.1.mga6
2.7.6-1.1.mga6
patch
Root:Debian:12
 before 2.7.6-7.aikido.7
2.7.6-7.aikido.72.7.6-7.root.io.52.7.6-7.root.io.22.7.6-7.root.io.42.7.6-7.root.io.62.7.6-7.root.io.3
rootio-patch
Root:Debian:12
 before 2.7.6-7.aikido.7
2.7.6-7.aikido.72.7.6-7.root.io.52.7.6-7.root.io.22.7.6-7.root.io.42.7.6-7.root.io.62.7.6-7.root.io.3
patch
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 3 CVEs
 before 2.7.5-8.5.1
2.7.5-8.5.1
patch
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 3 CVEs
 before 2.7.5-8.5.1
2.7.5-8.5.1
patch
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 3 CVEs
 before 2.7.5-8.5.1
2.7.5-8.5.1
patch
Ubuntu:14.04:LTS
 before 2.7.1-4ubuntu2.4, plus listed versions
2.7.1-32.7.1-42.7.1-4ubuntu12.7.1-4ubuntu22.7.1-4ubuntu2.3
2.7.1-4ubuntu2.4
patch
Ubuntu:16.04:LTS
 before 2.7.5-1ubuntu0.16.04.1, plus listed versions
2.7.5-1
2.7.5-1ubuntu0.16.04.1
patch
Ubuntu:14.04:LTS
From an advisory covering 3 CVEs
 before 2.7.1-4ubuntu2.4, plus listed versions
2.7.1-32.7.1-42.7.1-4ubuntu12.7.1-4ubuntu22.7.1-4ubuntu2.3
2.7.1-4ubuntu2.4
patch
Ubuntu:16.04:LTS
From an advisory covering 3 CVEs
 before 2.7.5-1ubuntu0.16.04.1, plus listed versions
2.7.5-1
2.7.5-1ubuntu0.16.04.1
patch
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 2.7.6-3.43
2.7.6-3.43

History

History
RecordedChangedSources
affected
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-6951 is a high vulnerability (CVSS 7.5) in Gnu Patch, published February 13, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.36%, the 94th percentile. Fixed in patch 2.7.6-r2.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open