cbcvebase.
CVE-2018-20969
published 2019-08-16

CVE-2018-20969: do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but…

high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

Affected

23 ranges
VendorProductVersion rangeFixed in
debianpatch< patch 2.7.6-5 (bookworm)patch 2.7.6-5 (bookworm)
gnupatch<= 2.7.6
gnupatch>= 0 < 2.7.6-52.7.6-5
gnupatch>= 0 < 2.7.6-52.7.6-5
gnupatch>= 0 < 2.7.6-52.7.6-5
gnupatch>= 0 < 2.7.6-52.7.6-5
msrcazl3_patch_2.7.6-9_on_azure_linux_3.0
msrccbl2_patch_2.7.6-7_on_cbl_mariner_2.0
msrccbl_mariner_1.0_arm
msrccbl_mariner_1.0_x64
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64
msrccm1_patch_2.7.6-7_on_cbl_mariner_1.0
msrcpatch-2.7.6-7.cm1.aarch64.rpm_on_cbl_mariner_1.0_arm
msrcpatch-2.7.6-7.cm1.x86_64.rpm_on_cbl_mariner_1.0_x64
msrcpatch-2.7.6-7.cm2.aarch64.rpm_on_cbl_mariner_2.0_arm
msrcpatch-2.7.6-7.cm2.x86_64.rpm_on_cbl_mariner_2.0_x64
msrcpatch-2.7.6-9.azl3.aarch64.rpm_on_azure_linux_3.0_arm
msrcpatch-2.7.6-9.azl3.x86_64.rpm_on_azure_linux_3.0_x64
msrcpatch-debuginfo-2.7.6-7.cm1.aarch64.rpm_on_cbl_mariner_1.0_arm
msrcpatch-debuginfo-2.7.6-7.cm1.x86_64.rpm_on_cbl_mariner_1.0_x64
msrcpatch-debuginfo-2.7.6-7.cm2.aarch64.rpm_on_cbl_mariner_2.0_arm
msrcpatch-debuginfo-2.7.6-7.cm2.x86_64.rpm_on_cbl_mariner_2.0_x64

CVSS provenance

nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH