CVE-2015-1416
published 2018-02-05CVE-2015-1416: Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5…
high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | patch | < patch 2.5-1 (bookworm) | patch 2.5-1 (bookworm) |
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| gnu | patch | >= 0 < 2.5-1 | 2.5-1 |
| gnu | patch | >= 0 < 2.5-1 | 2.5-1 |
| gnu | patch | >= 0 < 2.5-1 | 2.5-1 |
| gnu | patch | >= 0 < 2.5-1 | 2.5-1 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH