Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:patch:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Patch (30543349-3662-5a7f-ac1f-f5739cda3f5e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/patch |
purl2cpe | 2026-06-01 10:11:55.112615 |
pkg:deb/ubuntu/patch |
purl2cpe | 2026-06-01 10:11:55.112619 |
pkg:github/mirror/patch |
purl2cpe | 2026-06-01 10:11:55.112621 |
pkg:gitlab/redhat/patch |
purl2cpe | 2026-06-01 10:11:55.112624 |
pkg:gnu/patch |
purl2cpe | 2026-06-01 10:11:55.112627 |
pkg:rpm/centos/patch |
purl2cpe | 2026-06-01 10:11:55.112629 |
pkg:rpm/fedora/patch |
purl2cpe | 2026-06-01 10:11:55.112632 |
pkg:rpm/opensuse/patch |
purl2cpe | 2026-06-01 10:11:55.112635 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-20633 |
vulnerable | 2026-06-08 05:13:40.867288 |
Details available
GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.
Published: 2020-03-25T16:44:49.000Z
Updated: 2024-08-05T02:46:10.304Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13636 |
vulnerable | 2026-06-08 05:12:52.238812 |
Details available
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.
Published: 2019-07-17T20:04:00.000Z
Updated: 2024-08-04T23:57:39.470Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6952 |
vulnerable | 2026-06-08 05:11:54.492260 |
Details available
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
Published: 2018-02-13T19:00:00.000Z
Updated: 2024-08-05T06:17:17.357Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6951 |
vulnerable | 2026-06-08 05:11:54.491508 |
Details available
An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.
Published: 2018-02-13T19:00:00.000Z
Updated: 2024-08-05T06:17:17.195Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20969 |
vulnerable | 2026-06-08 05:11:28.255395 |
Details available
do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.
Published: 2019-08-16T03:36:12.000Z
Updated: 2024-08-05T12:19:26.375Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10713 |
vulnerable | 2026-06-08 05:07:25.620735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1396 |
vulnerable | 2026-06-08 05:06:25.541326 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1395 |
vulnerable | 2026-06-08 05:06:25.540837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9637 |
vulnerable | 2026-06-08 05:06:12.275534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.