ISOMAN

CVE

CVE-2018-1000156

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html
  2. http://rachelbythebay.com/w/2018/04/05/bangpatch/
  3. https://access.redhat.com/errata/RHSA-2018:1199
  4. https://access.redhat.com/errata/RHSA-2018:1200
  5. https://access.redhat.com/errata/RHSA-2018:2091
  6. https://access.redhat.com/errata/RHSA-2018:2092
  7. https://access.redhat.com/errata/RHSA-2018:2093
  8. https://access.redhat.com/errata/RHSA-2018:2094
  9. https://access.redhat.com/errata/RHSA-2018:2095
  10. https://access.redhat.com/errata/RHSA-2018:2096
  11. https://access.redhat.com/errata/RHSA-2018:2097
  12. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894667#19
  13. https://lists.debian.org/debian-lts-announce/2018/04/msg00013.html
  14. https://savannah.gnu.org/bugs/index.php?53566
  15. https://seclists.org/bugtraq/2019/Aug/29
  16. https://seclists.org/bugtraq/2019/Jul/54
  17. https://security.gentoo.org/glsa/201904-17
  18. https://usn.ubuntu.com/3624-1/
  19. https://usn.ubuntu.com/3624-2/
  20. https://web.archive.org/web/20180405231329/https://twitter.com/kurtseifried/status/982028968877436928