Vulnetix
Try Vulnetix Request Demo
CVE-2015-1395 PUBLISHED

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. (dot dot) in a diff file name.

EPSS 2.62% · 85.5th percentile

Risk Scores

EPSS Score
2.62%
85.5th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSpatch0, 2.7.1-3, 2.7.1-4

Timeline

References

Open in Interactive Console →