CVE-2018-20969

Published: Aug 16, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

Affected (1)

Products: Gnu: Patch

Gnu

1 product

Patch

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Patch	Up to 2.7.6

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (18)

http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2019:2798

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:2964

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:3757

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:3758

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:4061

Source: cve@mitre.org

https://git.savannah.gnu.org/cgit/patch.git/commit/?id=3fcd042d26d70856e826a42b5f93dc4854d80bf0

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/irsl/gnu-patch-vulnerabilities

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/Aug/29

Source: cve@mitre.org

ExploitMailing ListPatchThird Party Advisory

http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html