Medium severity · published Jul 17, 2019
CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files
5.9
CVSS
3.9%
EPSS
No
On KEV
Description
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Patch · Gnu
through 2.7.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-13636
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-13636
packetstormsecurity.com
http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html
Mailing List
https://git.savannah.gnu.org/cgit/patch.git/commit/?id=dce4683cbbe107a95f1f0d45fabc304acfb5d71a
github.com
https://github.com/irsl/gnu-patch-vulnerabilities
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/07/msg00016.html
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVWWGISFWACROJJPVJJL4UBLVZ7LPOLT/
seclists.org
https://seclists.org/bugtraq/2019/Aug/29
More from Patch
7.8
CVE-2018-20969
do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character
7.8
CVE-2019-13638
GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell…
7.8
CVE-2018-1000156
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution
7.5
CVE-2015-1396
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4
7.5
CVE-2018-6952
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6