CVE-2021-45261
published 2021-12-22CVE-2021-45261: An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
PriorityP416medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.70%
49.0th percentile
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | patch | — | — |
| gnu | patch | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5wqw-cqhv-q8cv: An Invalid Pointer vulnerability exists in GNU patch 2
ghsa_unreviewed·2021-12-23
CVE-2021-45261 [MEDIUM] CWE-763 GHSA-5wqw-cqhv-q8cv: An Invalid Pointer vulnerability exists in GNU patch 2
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
OSV
CVE-2021-45261: An Invalid Pointer vulnerability exists in GNU patch 2
osv·2021-12-22·CVSS 5.5
CVE-2021-45261 [MEDIUM] CVE-2021-45261: An Invalid Pointer vulnerability exists in GNU patch 2
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
Red Hat
patch: Invalid Pointer via another_hunk function
vendor_redhat·2021-12-22·CVSS 5.5
CVE-2021-45261 [MEDIUM] CWE-763 patch: Invalid Pointer via another_hunk function
patch: Invalid Pointer via another_hunk function
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
A flaw was found in patch. A possible memory corruption vulnerability could allow an attacker to input a specially crafted patch file leading to a crash or code execution.
Statement: This vulnerability is classified as low severity rather than moderate because it requires user interaction to be exploited, limiting its attack vector. An attacker must trick a user into manually applying a specially crafted patch file, reducing the likelihood of widespread exploitation.
Package: patch (Red Hat Enterprise Linux 6) - Not affected
Package: patch (Red Hat Enterprise Linux 7) - Out of support scope
Package: patch (Red Hat E
Debian
CVE-2021-45261: patch - An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk fu...
vendor_debian·2021·CVSS 5.5
CVE-2021-45261 [MEDIUM] CVE-2021-45261: patch - An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk fu...
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
2021-12-22
Published