Gnu Patch vulnerabilities

• gnu patch Loop with Unreachable Exit Condition in GNU patch CVE-2026-56289 Fix available 4.6 MediumJuly 9, 2026
• gnu patch NULL Pointer Dereference in GNU patch CVE-2026-56288 Fix available 4.6 MediumJuly 9, 2026
• gnu patch An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which... CVE-2021-45261 Fix available 5.5 MediumDecember 22, 2021
• gnu patch GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function... CVE-2019-20633 Fix available 5.5 MediumMarch 25, 2020
• gnu patch do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a !... CVE-2018-20969 Fix available 7.8 HighJuly 25, 2019
• gnu patch, debian linux +1 more GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by... CVE-2019-13638 Fix available 7.8 HighJuly 22, 2019
• gnu patch In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than... CVE-2019-13636 Fix available 5.9 MediumJuly 17, 2019
• gnu patch, canonical ubuntu linux, debian linux +6 more +8 more GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files,... CVE-2018-1000156 Fix available 7.8 HighApril 6, 2018
• gnu patch A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. CVE-2018-6952 Fix available 7.5 HighFebruary 13, 2018
• gnu patch, canonical ubuntu linux +1 more An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated... CVE-2018-6951 Fix available 7.5 HighFebruary 13, 2018
• gnu patch An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line()... CVE-2016-10713 Fix available 5.5 MediumFebruary 13, 2018
• gnu patch, debian linux +1 more A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can... CVE-2015-1396 Fix available 7.5 HighJanuary 28, 2015
• gnu patch, canonical ubuntu linux, fedoraproject fedora +2 more Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2... CVE-2015-1395 Fix available EPSS 11.3% 7.5 HighJanuary 28, 2015
• gnu patch, opensuse, oracle solaris +2 more GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a... CVE-2015-1196 Fix available 4.3 MediumJanuary 21, 2015
• gnu patch, canonical ubuntu linux, fedoraproject fedora +1 more +3 more GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory... CVE-2014-9637 Fix available 5.5 MediumDecember 31, 2014
• gnu patch Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted... CVE-2010-4651 Fix available 5.8 MediumMarch 11, 2011