Search for packages
| purl | pkg:deb/debian/patch@2.5-2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6p9q-vmce-e7gx
Aliases: CVE-2019-13636 |
Affected by 5 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
|
VCID-9417-uccf-8bf2
Aliases: CVE-2015-1396 |
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196. |
Affected by 5 other vulnerabilities. |
|
VCID-babz-twua-d7fy
Aliases: CVE-2019-13638 |
Affected by 5 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
|
VCID-h4n1-v4yw-d7a5
Aliases: CVE-2018-1000156 |
Affected by 3 other vulnerabilities. |
|
|
VCID-m9p4-evvv-efhg
Aliases: CVE-2016-10713 |
Affected by 3 other vulnerabilities. |
|
|
VCID-mnkb-wepk-qkd2
Aliases: CVE-2015-1395 |
Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. (dot dot) in a diff file name. |
Affected by 5 other vulnerabilities. |
|
VCID-ycff-3gg5-kyh6
Aliases: CVE-2015-1196 |
GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file. |
Affected by 5 other vulnerabilities. |
|
VCID-zbsx-6bfg-yybz
Aliases: CVE-2014-9637 |
GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file. |
Affected by 5 other vulnerabilities. |
|
VCID-zmz6-3d9k-7qdg
Aliases: CVE-2018-20969 |
security update |
Affected by 5 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||