CVE-2015-1396 PUBLISHED

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196.

EPSS 3.66% · 87.8th percentile

Risk Scores

EPSS Score
3.66%
87.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSpatch0, 2.7.1-3, 2.7.1-4

Timeline

References

Open in Interactive Console →