Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2019-20633 PUBLISHED CVSS 5.5 MEDIUM

GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.22patch0, 2.6-r0, 2.6.1-r0
Alpine:v3.16patch2.7-r0, 2.5.9-r0, 2.6-r0
Alpine:v3.17patch2.5.9-r0, 2.7.6-r1, 2.7.6-r6
Alpine:v3.14patch2.5.9-r0, 0, 2.7.1-r0
Alpine:v3.19patch0, 2.7.6-r6, 2.5.9-r0
Alpine:v3.18patch2.7.6-r5, 2.7.3-r0, 2.7.6-r3
Alpine:v3.23patch2.7-r0, 2.5.9-r0, 2.6-r0
Alpine:v3.21patch2.7.5-r1, 0, 2.5.9-r0
Alpine:v3.20patch2.5.9-r0, 0, 2.7.1-r0
Alpine:v3.11patch2.6.1-r2, 2.7-r0, 2.6.1-r0
Alpine:v3.12patch2.7.1-r0, 2.6.1-r0, 2.6.1-r1
Alpine:v3.13patch2.7.6-r1, 2.6.1-r2, 2.7.6-r6
Alpine:v3.15patch2.6-r0, 2.6.1-r0, 2.6.1-r2

Timeline

References

Open in Interactive Console →