Vulnetix
Try Vulnetix Request Demo
CVE-2019-20633 PUBLISHED

GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.

EPSS 0.12% · 30.1th percentile

Risk Scores

EPSS Score
0.12%
30.1th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSpatch2.7.6-6, 0
Ubuntu:16.04:LTSpatch0, 2.7.5-1, 2.7.5-1ubuntu0.16.04.1
Ubuntu:Pro:14.04:LTSpatch2.7.1-3, 2.7.1-4ubuntu1, 2.7.1-4
Ubuntu:18.04:LTSpatch2.7.6-2ubuntu1, 0, 2.7.5-1build1
Ubuntu:24.04:LTSpatch0, 2.7.6-7build3, 2.7.6-7build2
Ubuntu:25.10patch2.8-2, 0, 2.7.6-7build3
Ubuntu:22.04:LTSpatch0, 2.7.6-7build2, 2.7.6-7build1

Timeline

References

Open in Interactive Console →