Every CVESearch/Get API key

CVE-2010-4651

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted...

5.8 MediumFix available

CVE-2010-4651 is a medium vulnerability (CVSS 5.8) in Gnu Patch, published March 11, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.87%, the 92nd percentile. Fixed in patch 2.7.6-7.aikido.7.

Severity
5.8 MediumCVSS 2.0, NVD
Exploit chance
4.87%EPSS, 92nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.7.6-7.aikido.7patch +11 more

Description

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.

Exploit likelihood

4.87%Up 1.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
patch
Debian:12
All versions, plus listed versions
2.7.6-72.8-12.8-2
None known
patch
Debian:13
All versions, plus listed versions
2.8-2
None known
patch
Debian:14
All versions, plus listed versions
2.8-2
None known
patch
Root:Debian:12
before 2.7.6-7.aikido.7
2.7.6-7.aikido.72.7.6-7.root.io.6
rootio-patch
Root:Debian:12
before 2.7.6-7.aikido.7
2.7.6-7.aikido.72.7.6-7.root.io.6
patch
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 4 CVEs
before 2.5.9-252.22.7.1
2.5.9-252.22.7.1
patch
SUSE:Linux Enterprise Server 11 SP3-LTSS
From an advisory covering 4 CVEs
before 2.5.9-252.22.7.1
2.5.9-252.22.7.1
patch
SUSE:Linux Enterprise Server 11 SP3-TERADATA
From an advisory covering 4 CVEs
before 2.5.9-252.22.7.1
2.5.9-252.22.7.1
patch
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 4 CVEs
before 2.5.9-252.22.7.1
2.5.9-252.22.7.1
patch
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 4 CVEs
before 2.5.9-252.22.7.1
2.5.9-252.22.7.1
patch
Ubuntu:14.04:LTS
From an advisory covering 5 CVEs
before 2.7.1-4ubuntu2.3, plus listed versions
2.7.1-32.7.1-42.7.1-4ubuntu12.7.1-4ubuntu2
2.7.1-4ubuntu2.3
patch
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
before 2.7.5-1.112
2.7.5-1.112

What each source reports

NVD Score used5.8

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.

Record
CVE-2010-4651
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:N/I:P/A:P
Weakness
CWE-22
Updated
2026-11-02
CVE ListNo score

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.

Record
CVE-2010-4651
Updated
2026-11-02
EUVDEUVD-2010-4616No score

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.

Record
EUVD-2010-4616
Updated
2026-11-03
GitHub AdvisoriesGHSA-ghmh-8qx5-2gfpNo score

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted...

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.

Record
GHSA-ghmh-8qx5-2gfp
Weakness
CWE-22
Updated
2026-11-02
OSVNo score

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.

Record
CVE-2010-4651
Updated
2026-11-02
OSVDEBIAN-CVE-2010-4651No score

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.

Record
DEBIAN-CVE-2010-4651
Updated
2026-11-02
Show 5 moreShow less
OSVopenSUSE-SU-2024:10379-1No score

patch-2.7.5-1.112 on GA media

These are all security issues fixed in the patch-2.7.5-1.112 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10379-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2010-4651No score

CVE-2010-4651 in patch - Patched by Root

Root has patched CVE-2010-4651 in the patch package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2010-4651
Updated
2026-11-02
OSVSUSE-SU-2018:1162-1No score

Security update for patch

This update for patch fixes several issues.

These security issues were fixed:

  • CVE-2018-1000156: patch: Malicious patch files cause ed to execute arbitrary commands (bsc#1088420).
  • CVE-2014-9637: Prevent DoS by remote attackers (memory consumption and segmentation fault) via a crafted diff file (bsc#914891).
  • CVE-2016-10713: Prevent out-of-bounds access within pch_write_line() that could have lead to DoS via a crafted input file (bsc#1080918).
  • CVE-2010-4651: Fixed a directory traversal bug (bsc#662957):
Record
SUSE-SU-2018:1162-1
Updated
2026-11-02
OSVUBUNTU-CVE-2010-4651No score

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.

Record
UBUNTU-CVE-2010-4651
Updated
2026-11-02
OSVUSN-2651-1No score

patch vulnerabilities

Jakub Wilk discovered that GNU patch did not correctly handle file paths in patch files. An attacker could specially craft a patch file that could overwrite arbitrary files with the privileges of the user invoking the program. This issue only affected Ubuntu 12.04 LTS. (CVE-2010-4651)

László Böszörményi discovered that GNU patch did not correctly handle some patch files. An attacker could specially craft a patch file that could cause a denial of service. (CVE-2014-9637)

Jakub Wilk discovered that GNU patch did not correctly handle symbolic links in git style patch files. An attacker could specially craft a patch file that could overwrite arbitrary files with the privileges of the user invoking the program. This issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2015-1196)

Jakub Wilk discovered that GNU patch did not correctly handle file renames in git style patch files. An attacker could specially craft a patch file that could overwrite arbitrary files with the privileges of the user invoking the program. This issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2015-1395)

Jakub Wilk discovered the fix for CVE-2015-1196 was incomplete for GNU patch. An attacker could specially craft a patch file that could overwrite arbitrary files with the privileges of the user invoking the program. This issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2015-1396)

Record
USN-2651-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 30 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open