遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2019:2964 公告中提及的多個弱點影響。

  - patch：pch.c 中的 do_ed_script 不會攔截以 ! 字元開頭的字串 (CVE-2018-20969)

  - patch：當處理特製的修補程式檔案時，會發生 OS shell 命令插入 (CVE-2019-13638)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 CentOS Linux 8 主機上安裝的套件受到 CESA-2019: 2798 公告中提及的多個弱點影響。

  - patch：pch.c 中的 do_ed_script 不會攔截以 ! 字元開頭的字串 (CVE-2018-20969)

  - patch：當處理特製的修補程式檔案時，發生 OS shell 命令插入 (CVE-2019-13638)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

An update for patch is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file (patching the file).

Security Fix(es) :

* patch: do_ed_script in pch.c does not block strings beginning with a ! character (CVE-2018-20969)

* patch: OS shell command injection when processing crafted patch files (CVE-2019-13638)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - patch: do_ed_script in pch.c does not block strings     beginning with a ! character (CVE-2018-20969)

  - patch: OS shell command injection when processing     crafted patch files (CVE-2019-13638)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU patch before 2.7.6.
    Out-of-bounds access within pch_write_line() in pch.c     can possibly lead to DoS via a crafted input     file.(CVE-2016-10713)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the     ! syntax is specific to ed, and is unrelated to a shell     metacharacter.(CVE-2018-20969)

  - GNU patch 2.7.1 allows remote attackers to write to     arbitrary files via a symlink attack in a patch     file.(CVE-2015-1196)

  - GNU patch 2.7.2 and earlier allows remote attackers to     cause a denial of service (memory consumption and     segmentation fault) via a crafted diff     file.(CVE-2014-9637)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This     is different from CVE-2018-1000156.(CVE-2019-13638)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the patch package has been released.

The version of patch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-20969 advisory.

  - do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character.
    NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated     to a shell metacharacter. (CVE-2018-20969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638 , but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.(CVE-2018-20969)

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156 .(CVE-2019-13638)

A heap-based out-of-bounds read flaw was found in the way the patch utility parsed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patch files.(CVE-2016-10713)

A double-free flaw was found in the way the patch utility processed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches.(CVE-2018-6952)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has patch packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in GNU patch before 2.7.6. Out-     of-bounds access within pch_write_line() in pch.c can     possibly lead to DoS via a crafted input file.
    (CVE-2016-10713)

  - A double free exists in the another_hunk function in     pch.c in GNU patch through 2.7.6. (CVE-2018-6952)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This is     different from CVE-2018-1000156. (CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the !     syntax is specific to ed, and is unrelated to a shell     metacharacter. (CVE-2018-20969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the patch package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU patch before 2.7.6.
    Out-of-bounds access within pch_write_line() in pch.c     can possibly lead to DoS via a crafted input     file.(CVE-2016-10713)

  - GNU patch 2.7.2 and earlier allows remote attackers to     cause a denial of service (memory consumption and     segmentation fault) via a crafted diff     file.(CVE-2014-9637)

  - GNU patch 2.7.1 allows remote attackers to write to     arbitrary files via a symlink attack in a patch     file.(CVE-2015-1196)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This     is different from CVE-2018-1000156.(CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the     ! syntax is specific to ed, and is unrelated to a shell     metacharacter.(CVE-2018-20969)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A double free exists in the another_hunk function in     pch.c in GNU patch through 2.7.6.(CVE-2018-6952)

  - Directory traversal vulnerability in GNU patch versions     which support Git-style patching before 2.7.3 allows     remote attackers to write to arbitrary files with the     permissions of the target user via a .. (dot dot) in a     diff file name.(CVE-2015-1395)

  - An issue was discovered in GNU patch before 2.7.6.
    Out-of-bounds access within pch_write_line() in pch.c     can possibly lead to DoS via a crafted input     file.(CVE-2016-10713)

  - GNU patch 2.7.2 and earlier allows remote attackers to     cause a denial of service (memory consumption and     segmentation fault) via a crafted diff     file.(CVE-2014-9637)

  - This vulnerability has been modified since it was last     analyzed by the NVD. It is awaiting reanalysis which     may result in further changes to the information     provided.(CVE-2015-1196)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This     is different from CVE-2018-1000156.(CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the     ! syntax is specific to ed, and is unrelated to a shell     metacharacter.(CVE-2018-20969)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
129576	RHEL 7：patch (RHSA-2019:2964)	Nessus	Red Hat Local Security Checks	2019/10/4	2024/11/6	high
145647	CentOS 8：patch (CESA-2019: 2798)	Nessus	CentOS Local Security Checks	2021/1/29	2021/3/23	high
144025	Virtuozzo 7 : patch (VZLSA-2019-2964)	Nessus	Virtuozzo Local Security Checks	2020/12/10	2024/2/2	high
129577	Scientific Linux Security Update : patch on SL7.x x86_64 (20191003)	Nessus	Scientific Linux Local Security Checks	2019/10/4	2024/4/19	high
132180	EulerOS 2.0 SP3 : patch (EulerOS-SA-2019-2645)	Nessus	Huawei Local Security Checks	2019/12/18	2024/4/3	high
236885	Photon OS 4.0: Patch PHSA-2024-4.0-0564	Nessus	PhotonOS Local Security Checks	2025/5/17	2025/5/17	high
201836	CBL Mariner 2.0 Security Update: patch (CVE-2018-20969)	Nessus	MarinerOS Local Security Checks	2024/7/3	2024/7/3	high
130214	Amazon Linux 2 : patch (ALAS-2019-1317)	Nessus	Amazon Linux Local Security Checks	2019/10/25	2024/4/17	high
132496	NewStart CGSL CORE 5.05 / MAIN 5.05 : patch Multiple Vulnerabilities (NS-SA-2019-0253)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2021/1/14	high
134514	EulerOS Virtualization for ARM 64 3.0.2.0 : patch (EulerOS-SA-2020-1225)	Nessus	Huawei Local Security Checks	2020/3/13	2024/3/22	high
233765	Photon OS 5.0: Patch PHSA-2024-5.0-0424	Nessus	PhotonOS Local Security Checks	2025/4/2	2025/4/2	high
135608	EulerOS Virtualization 3.0.2.2 : patch (EulerOS-SA-2020-1446)	Nessus	Huawei Local Security Checks	2020/4/16	2024/3/15	high
128739	Photon OS 3.0: Patch PHSA-2019-3.0-0025	Nessus	PhotonOS Local Security Checks	2019/9/12	2025/8/22	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high