GNU Patch 2.7.6
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:patch:2.7.6:*:*:*:*:*:*:*
part: a version: 2.7.6 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Patch (30543349-3662-5a7f-ac1f-f5739cda3f5e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/patch |
purl2cpe | 2026-06-01 10:11:55.112746 |
pkg:deb/ubuntu/patch |
purl2cpe | 2026-06-01 10:11:55.112747 |
pkg:github/mirror/patch |
purl2cpe | 2026-06-01 10:11:55.112748 |
pkg:gitlab/redhat/patch |
purl2cpe | 2026-06-01 10:11:55.112750 |
pkg:gnu/patch |
purl2cpe | 2026-06-01 10:11:55.112751 |
pkg:rpm/centos/patch |
purl2cpe | 2026-06-01 10:11:55.112752 |
pkg:rpm/fedora/patch |
purl2cpe | 2026-06-01 10:11:55.112754 |
pkg:rpm/opensuse/patch |
purl2cpe | 2026-06-01 10:11:55.112755 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-13638 |
vulnerable | 2026-06-08 05:12:52.241962 |
Details available
GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156.
Published: 2019-07-26T12:22:43.000Z
Updated: 2024-08-04T23:57:39.539Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000156 |
vulnerable | 2026-06-08 05:10:25.545794 |
Details available
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
Published: 2018-04-06T13:00:00.000Z
Updated: 2025-04-14T19:36:21.263Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.