According to the version of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In GNU patch through 2.7.6, the following of symlinks     is mishandled in certain cases other than input files.
    This affects inp.c and util.c.(CVE-2019-13636)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - In GNU patch through 2.7.6, the following of symlinks     is mishandled in certain cases other than input files.
    This affects inp.c and util.c.(CVE-2019-13636)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1852 advisory.

  - patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files     (CVE-2019-13636)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4071-1 advisory.

    It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this issue     to access sensitive information. (CVE-2019-13636)

    It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this issue     to execute arbitrary code. (CVE-2019-13638)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of patch installed on the remote host is prior to 2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-256-01 advisory.

    New patch packages are available for Slackware 15.0 to fix security issues.

Tenable has extracted the preceding description block directly from the patch security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0056 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-13636:
    In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input     files. This affects inp.c and util.c.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1852 advisory.

    - CVE-2019-13636 , Dont follow symlinks unless --follow-symlinks is given

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the patch package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In GNU patch through 2.7.6, the following of symlinks     is mishandled in certain cases other than input files.
    This affects inp.c and util.c.(CVE-2019-13636)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1852 advisory.

    The patch program applies diff files to originals. The diff command is used to compare an original to a     changed file. Diff lists the changes made to the file. A person who has the original file can then use the     patch command with the diff file to add the changes to their original file (patching the file).

    Security Fix(es):

    * patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files     (CVE-2019-13636)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1932-1 advisory.

  - A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. (CVE-2018-6952)

  - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input     files. This affects inp.c and util.c. (CVE-2019-13636)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the patch package has been released.

ID	名稱	產品	系列	已發布	已更新	嚴重性
134808	EulerOS 2.0 SP5 : patch (EulerOS-SA-2020-1317)	Nessus	Huawei Local Security Checks	2020/3/23	2025/2/21	medium
140887	EulerOS 2.0 SP3 : patch (EulerOS-SA-2020-2120)	Nessus	Huawei Local Security Checks	2020/9/28	2025/2/20	medium
141749	EulerOS Virtualization 3.0.2.2 : patch (EulerOS-SA-2020-2220)	Nessus	Huawei Local Security Checks	2020/10/21	2025/2/20	medium
145812	CentOS 8 : patch (CESA-2020:1852)	Nessus	CentOS Local Security Checks	2021/2/1	2025/2/20	medium
127042	Ubuntu 16.04 LTS / 18.04 LTS : Patch vulnerabilities (USN-4071-1)	Nessus	Ubuntu Local Security Checks	2019/7/25	2024/8/27	high
264686	Slackware Linux 15.0 patch Multiple Vulnerabilities (SSA:2025-256-01)	Nessus	Slackware Local Security Checks	2025/9/13	2025/9/13	high
236656	Alibaba Cloud Linux 3 : 0056: patch (ALINUX3-SA-2022:0056)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	medium
180982	Oracle Linux 8 : patch (ELSA-2020-1852)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2025/2/19	medium
135122	EulerOS Virtualization for ARM 64 3.0.6.0 : patch (EulerOS-SA-2020-1335)	Nessus	Huawei Local Security Checks	2020/4/2	2025/2/21	medium
136243	EulerOS Virtualization for ARM 64 3.0.2.0 : patch (EulerOS-SA-2020-1540)	Nessus	Huawei Local Security Checks	2020/5/1	2025/2/21	medium
142347	EulerOS 2.0 SP2 : patch (EulerOS-SA-2020-2378)	Nessus	Huawei Local Security Checks	2020/11/3	2025/2/20	medium
143013	RHEL 8 : patch (RHSA-2020:1852)	Nessus	Red Hat Local Security Checks	2020/11/18	2025/2/20	medium
161833	SUSE SLES12 Security Update : patch (SUSE-SU-2022:1932-1)	Nessus	SuSE Local Security Checks	2022/6/4	2025/2/20	medium
128712	Photon OS 2.0: Patch PHSA-2019-2.0-0172	Nessus	PhotonOS Local Security Checks	2019/9/12	2024/7/22	high

偵測

搜尋 Plugin

medium

medium

medium

medium

high

high

medium

medium

medium

medium

medium

medium

medium

high