do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638 , but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.(CVE-2018-20969)

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156 . (CVE-2019-13638)

A heap-based out-of-bounds read flaw was found in the way the patch utility parsed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patch files.(CVE-2016-10713)

A double-free flaw was found in the way the patch utility processed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches.(CVE-2018-6952)

The version of patch installed on the remote host is prior to 2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-256-01 advisory.

    New patch packages are available for Slackware 15.0 to fix security issues.

Tenable has extracted the preceding description block directly from the patch security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201904-17 (Patch: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Patch. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Directory traversal vulnerability in GNU patch versions     which support Git-style patching before 2.7.3 allows     remote attackers to write to arbitrary files with the     permissions of the target user via a .. (dot dot) in a     diff file name.(CVE-2015-1395)

  - A double-free flaw was found in the way the patch     utility processed patch files. An attacker could     potentially use this flaw to crash the patch utility by     tricking it into processing crafted     patches.(CVE-2018-6952)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of patch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-6952 advisory.

  - A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. (CVE-2018-6952)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of 'patch' packages of Photon OS has been released.

An update of the patch package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1925-1 advisory.

  - A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. (CVE-2018-6952)

  - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input     files. This affects inp.c and util.c. (CVE-2019-13636)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638 , but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.(CVE-2018-20969)

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156 .(CVE-2019-13638)

A heap-based out-of-bounds read flaw was found in the way the patch utility parsed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patch files.(CVE-2016-10713)

A double-free flaw was found in the way the patch utility processed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches.(CVE-2018-6952)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has patch packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in GNU patch before 2.7.6. Out-     of-bounds access within pch_write_line() in pch.c can     possibly lead to DoS via a crafted input file.
    (CVE-2016-10713)

  - A double free exists in the another_hunk function in     pch.c in GNU patch through 2.7.6. (CVE-2018-6952)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This is     different from CVE-2018-1000156. (CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the !     syntax is specific to ed, and is unrelated to a shell     metacharacter. (CVE-2018-20969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A double free exists in the another_hunk function in     pch.c in GNU patch through 2.7.6.(CVE-2018-6952)

  - Directory traversal vulnerability in GNU patch versions     which support Git-style patching before 2.7.3 allows     remote attackers to write to arbitrary files with the     permissions of the target user via a .. (dot dot) in a     diff file name.(CVE-2015-1395)

  - An issue was discovered in GNU patch before 2.7.6.
    Out-of-bounds access within pch_write_line() in pch.c     can possibly lead to DoS via a crafted input     file.(CVE-2016-10713)

  - GNU patch 2.7.2 and earlier allows remote attackers to     cause a denial of service (memory consumption and     segmentation fault) via a crafted diff     file.(CVE-2014-9637)

  - This vulnerability has been modified since it was last     analyzed by the NVD. It is awaiting reanalysis which     may result in further changes to the information     provided.(CVE-2015-1196)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This     is different from CVE-2018-1000156.(CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the     ! syntax is specific to ed, and is unrelated to a shell     metacharacter.(CVE-2018-20969)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

在到 2.7.6 為止的 GNU 修補程式中，pch.c 中 do_ed_script 未封鎖開頭為 ! 字元的字串。請注意：這是與適用於 CVE-2019-13638 相同的認可，但 ! 語法為 ed 特定，且與 shell 詮釋字元無關。(CVE-2018-20969) 在到 2.7.6 為止的 GNU 修補程式容易發生 OS shell 命令插入，以 shell 詮釋字元開啟含有 ed 樣式 diff 承載的特製修補程式檔案即可加以惡意利用。ed 編輯器不需顯示在易受害系統上。這與 CVE-2018-1000156 不同。(CVE-2019-13638)

遠端 Oracle Linux 7 主機上有一個套件受到 ELSA-2019-2033 公告中提及的多個弱點影響。

  - 在 GNU 修補程式 2.7.6 之前版本中發現一個問題。pch.c 的 pch_write_line() 中存在超出邊界存取弱點，透過特製的輸入檔案可利用此弱點導致 DoS。(CVE-2016-10713)

  - 在 GNU 修補程式 2.7.6 以及之前的所有版本中，pch.c 的 another_hunk 函式中存在重複釋放問題。(CVE-2018-6952)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機受到 GLSA-201904-17 中所述的弱點影響 (Patch：多個弱點) 在 Patch 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：如需詳細資料，請檢閱提及的 CVE 識別碼。因應措施：目前尚無已知的因應措施。

遠端主機上安裝的 patch 版本比 2.8舊。因此會受到 SSA:2025-256-01 公告中提及的多個弱點影響。

    現已提供適用於 Slackware 15.0 的新修補程式套件可修正多個安全性問題。

Tenable 已直接從修補程式安全性公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名稱	產品	系列	已發布	已更新	嚴重性
130282	Amazon Linux AMI : patch (ALAS-2019-1312)	Nessus	Amazon Linux Local Security Checks	2019/10/28	2024/4/16	high
264686	Slackware Linux 15.0 patch Multiple Vulnerabilities (SSA:2025-256-01)	Nessus	Slackware Local Security Checks	2025/9/13	2025/9/13	high
124130	GLSA-201904-17 : Patch: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2019/4/18	2024/6/3	high
129197	EulerOS 2.0 SP3 : patch (EulerOS-SA-2019-2004)	Nessus	Huawei Local Security Checks	2019/9/24	2024/4/23	high
201270	CBL Mariner 2.0 Security Update: patch (CVE-2018-6952)	Nessus	MarinerOS Local Security Checks	2024/7/2	2024/7/2	high
118208	Photon OS 1.0: Patch PHSA-2018-1.0-0189 (deprecated)	Nessus	PhotonOS Local Security Checks	2018/10/18	2019/2/7	high
121998	Photon OS 2.0: Patch PHSA-2018-2.0-0102	Nessus	PhotonOS Local Security Checks	2019/2/7	2024/7/22	high
161826	SUSE SLED15 / SLES15 Security Update : patch (SUSE-SU-2022:1925-1)	Nessus	SuSE Local Security Checks	2022/6/3	2025/2/20	medium
130214	Amazon Linux 2 : patch (ALAS-2019-1317)	Nessus	Amazon Linux Local Security Checks	2019/10/25	2024/4/17	high
132496	NewStart CGSL CORE 5.05 / MAIN 5.05 : patch Multiple Vulnerabilities (NS-SA-2019-0253)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2021/1/14	high
135608	EulerOS Virtualization 3.0.2.2 : patch (EulerOS-SA-2020-1446)	Nessus	Huawei Local Security Checks	2020/4/16	2024/3/15	high
233765	Photon OS 5.0: Patch PHSA-2024-5.0-0424	Nessus	PhotonOS Local Security Checks	2025/4/2	2025/4/2	high
130282	Amazon Linux AMI：patch (ALAS-2019-1312)	Nessus	Amazon Linux Local Security Checks	2019/10/28	2024/4/16	high
180783	Oracle Linux 7：修補程式 (ELSA-2019-2033)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/23	high
124130	GLSA-201904-17：Patch：多個弱點	Nessus	Gentoo Local Security Checks	2019/4/18	2024/6/3	high
264686	Slackware Linux 15.0 修補程式多個弱點 (SSA2025-256-01)	Nessus	Slackware Local Security Checks	2025/9/13	2025/9/13	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

medium

high

high

high

high

high

high

high

high