CVE-2018-1000156
Fixed in a distro release EPSS 5%
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
Products: gnu patch, canonical ubuntu_linux, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | patch | 2.7.6-r6 |
| Alpine 3.11 | patch | 2.7.6-r6 |
| Alpine 3.12 | patch | 2.7.6-r6 |
| Alpine 3.13 | patch | 2.7.6-r6 |
| Alpine 3.14 | patch | 2.7.6-r6 |
| Alpine 3.15 | patch | 2.7.6-r6 |
| Alpine 3.16 | patch | 2.7.6-r6 |
| Alpine 3.17 | patch | 2.7.6-r6 |
| Alpine 3.18 | patch | 2.7.6-r6 |
| Alpine 3.19 | patch | 2.7.6-r6 |
| Alpine 3.20 | patch | 2.7.6-r6 |
| Alpine 3.21 | patch | 2.7.6-r6 |
| Alpine 3.22 | patch | 2.7.6-r6 |
| Alpine 3.23 | patch | 2.7.6-r6 |
| Alpine 3.24 | patch | 2.7.6-r6 |
| Alpine 3.7 | patch | 2.7.6-r0 |
| Alpine 3.8 | patch | 2.7.6-r4 |
| Alpine 3.9 | patch | 2.7.6-r6 |
| Amazon Linux 2 | patch | 2.7.1-10.amzn2 |
| Arch Linux | patch | 2.7.6-3 |
| Arch Linux | patch | 2.7.6-7 |
| Chainguard | patch | 2.7.6-r3 |
| Debian 12 | patch | 2.7.6-2 |
| Debian 13 | patch | 2.7.6-2 |
| Debian 14 | patch | 2.7.6-2 |
| Debian 7 | patch | 2.6.1-3+deb7u1 |
| Red Hat Enterprise Linux 6 | patch | 0:2.6-8.el6_9 |
| Red Hat Enterprise Linux 6 | patch-debuginfo | 0:2.6-8.el6_9 |
| Red Hat Enterprise Linux 7 | patch | 0:2.7.1-10.el7_5 |
| Red Hat Enterprise Linux 7 | patch-debuginfo | 0:2.7.1-10.el7_5 |
| Red Hat rhel aus 6.4 | patch | 0:2.6-8.el6_4 |
| Red Hat rhel aus 6.4 | patch-debuginfo | 0:2.6-8.el6_4 |
| Red Hat rhel aus 6.5 | patch | 0:2.6-8.el6_5 |
| Red Hat rhel aus 6.5 | patch-debuginfo | 0:2.6-8.el6_5 |
| Red Hat rhel aus 6.6 | patch | 0:2.6-8.el6_6 |
| Red Hat rhel aus 6.6 | patch-debuginfo | 0:2.6-8.el6_6 |
| Red Hat rhel aus 7.2 | patch | 0:2.7.1-10.el7_2 |
| Red Hat rhel aus 7.2 | patch-debuginfo | 0:2.7.1-10.el7_2 |
| Red Hat rhel e4s 7.2 | patch | 0:2.7.1-10.el7_2 |
| Red Hat rhel e4s 7.2 | patch-debuginfo | 0:2.7.1-10.el7_2 |
| Red Hat rhel eus 6.7 | patch | 0:2.6-8.el6_7 |
| Red Hat rhel eus 6.7 | patch-debuginfo | 0:2.6-8.el6_7 |
| Red Hat rhel eus 7.3 | patch | 0:2.7.1-10.el7_3 |
| Red Hat rhel eus 7.3 | patch-debuginfo | 0:2.7.1-10.el7_3 |
| Red Hat rhel eus 7.4 | patch | 0:2.7.1-10.el7_4 |
| Red Hat rhel eus 7.4 | patch-debuginfo | 0:2.7.1-10.el7_4 |
| Red Hat rhel tus 6.6 | patch | 0:2.6-8.el6_6 |
| Red Hat rhel tus 6.6 | patch-debuginfo | 0:2.6-8.el6_6 |
| Red Hat rhel tus 7.2 | patch | 0:2.7.1-10.el7_2 |
| Red Hat rhel tus 7.2 | patch-debuginfo | 0:2.7.1-10.el7_2 |
| SUSE Linux Enterprise Desktop 12 SP3 | patch | 2.7.5-8.5.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | patch | 2.5.9-252.22.7.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | patch | 2.5.9-252.22.7.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | patch | 2.5.9-252.22.7.1 |
| SUSE Linux Enterprise Server 11 SP4 | patch | 2.5.9-252.22.7.1 |
| SUSE Linux Enterprise Server 12 SP3 | patch | 2.7.5-8.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | patch | 2.5.9-252.22.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | patch | 2.7.5-8.5.1 |
| Ubuntu 14.04 LTS | patch | 2.7.1-4ubuntu2.4 |
| Ubuntu 16.04 LTS | patch | 2.7.5-1ubuntu0.16.04.1 |
| Wolfi | patch | 2.7.6-r3 |
| openSUSE Tumbleweed | patch | 2.7.6-3.43 |