VDB

DEBIAN-CVE-2018-6951

DEBIAN-CVE-2018-6951 PUBLISHED CVSS 7.5 HIGH

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Risk Scores

CVSS v3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:14patch0, 2.8-2, 0
Debian:11patch2.8-1, 0, 2.7.6-7
Debian:12patch2.7.6-7, 2.8-1, 2.8-2
Debian:13patch2.8-2, 2.8-2, 0

Timeline

  • Feb 13, 2018 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›