An update for patch is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file (patching the file).

Security Fix(es) :

* patch: Out-of-bounds access in pch_write_line function in pch.c (CVE-2016-10713)

* patch: Double free of memory in pch.c:another_hunk() causes a crash (CVE-2018-6952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

This update for patch fixes several issues. These security issues were fixed :

  - CVE-2018-1000156: patch: Malicious patch files cause ed     to execute arbitrary commands (bsc#1088420).

  - CVE-2014-9637: Prevent DoS by remote attackers (memory     consumption and segmentation fault) via a crafted diff     file (bsc#914891).

  - CVE-2016-10713: Prevent out-of-bounds access within     pch_write_line() that could have lead to DoS via a     crafted input file (bsc#1080918).

  - CVE-2010-4651: Fixed a directory traversal bug     (bsc#662957) :

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for patch fixes the following issues: Security issues fixed :

  - CVE-2018-1000156: Malicious patch files cause ed to     execute arbitrary commands (bsc#1088420).

  - CVE-2018-6951: Fixed NULL pointer dereference in the     intuit_diff_type function in pch.c (bsc#1080918).

  - CVE-2016-10713: Fixed out-of-bounds access within     pch_write_line() in pch.c (bsc#1080918).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GNU patch 2.7.2 and earlier allows remote attackers to     cause a denial of service (memory consumption and     segmentation fault) via a crafted diff     file.(CVE-2014-9637)

  - An issue was discovered in GNU patch before 2.7.6.
    Out-of-bounds access within pch_write_line() in pch.c     can possibly lead to DoS via a crafted input     file.(CVE-2016-10713)

  - GNU patch 2.7.1 allows remote attackers to write to     arbitrary files via a symlink attack in a patch     file.(CVE-2015-1196)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the patch package has been released.

This update for patch fixes the following issues :

Security issues fixed :

  - CVE-2018-1000156: Malicious patch files cause ed to     execute arbitrary commands (bsc#1088420).

  - CVE-2018-6951: Fixed NULL pointer dereference in the     intuit_diff_type function in pch.c (bsc#1080918).

  - CVE-2016-10713: Fixed out-of-bounds access within     pch_write_line() in pch.c (bsc#1080918).

This update was imported from the SUSE:SLE-12:Update update project.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has patch packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in GNU patch before 2.7.6. Out-     of-bounds access within pch_write_line() in pch.c can     possibly lead to DoS via a crafted input file.
    (CVE-2016-10713)

  - A double free exists in the another_hunk function in     pch.c in GNU patch through 2.7.6. (CVE-2018-6952)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This is     different from CVE-2018-1000156. (CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the !     syntax is specific to ed, and is unrelated to a shell     metacharacter. (CVE-2018-20969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2033 advisory.

    - Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function
    - Fixed CVE-2018-6952 - Double free of memory

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c     can possibly lead to DoS via a crafted input file. (CVE-2016-10713)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
128334	CentOS 7 : patch (CESA-2019:2033)	Nessus	CentOS Local Security Checks	2019/8/30	2019/12/31	high
109599	SUSE SLES11 Security Update : patch (SUSE-SU-2018:1162-1)	Nessus	SuSE Local Security Checks	2018/5/8	2024/10/11	high
109549	SUSE SLED12 / SLES12 Security Update : patch (SUSE-SU-2018:1128-1)	Nessus	SuSE Local Security Checks	2018/5/3	2024/10/14	high
131582	EulerOS 2.0 SP2 : patch (EulerOS-SA-2019-2428)	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	medium
128712	Photon OS 2.0: Patch PHSA-2019-2.0-0172	Nessus	PhotonOS Local Security Checks	2019/9/12	2024/7/22	high
109540	openSUSE Security Update : patch (openSUSE-2018-416)	Nessus	SuSE Local Security Checks	2018/5/3	2024/10/14	high
132496	NewStart CGSL CORE 5.05 / MAIN 5.05 : patch Multiple Vulnerabilities (NS-SA-2019-0253)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2021/1/14	high
180783	Oracle Linux 7 : patch (ELSA-2019-2033)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/23	high
219290	Linux Distros Unpatched Vulnerability : CVE-2016-10713	Nessus	Misc.	2025/3/4	2026/9/2	medium

検出

プラグインの検索

high

high

high

medium

high

high

high

high

medium