CVEDB API

Vulnerability Details CVE-2018-1000156

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.442

EPSS Ranking 97.4%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2018-1000156

Gnu » Patch » Version: 2.7.6

cpe:2.3:a:gnu:patch:2.7.6
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 17.10

cpe:2.3:o:canonical:ubuntu_linux:17.10
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 6.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4
Redhat » Enterprise Linux Server Aus » Version: 6.5

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5
Redhat » Enterprise Linux Server Aus » Version: 6.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6
Redhat » Enterprise Linux Server Aus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2
Redhat » Enterprise Linux Server Aus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
Redhat » Enterprise Linux Server Aus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Eus » Version: 6.7

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7
Redhat » Enterprise Linux Server Eus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3
Redhat » Enterprise Linux Server Eus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4
Redhat » Enterprise Linux Server Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
Redhat » Enterprise Linux Server Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
Redhat » Enterprise Linux Server Tus » Version: 6.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6
Redhat » Enterprise Linux Server Tus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2
Redhat » Enterprise Linux Server Tus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3
Redhat » Enterprise Linux Server Tus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000156

Products

Pricing

Contact Us