CVE-2016-10713

MEDIUM

GNU Patch < 2.7.6 - Memory Corruption

Title source: rule

Description

An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.

References (5)

[Vendor Advisory] https://usn.ubuntu.com/3624-2/

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/103063

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2019:2033

[Patch, Vendor Advisory] https://git.savannah.gnu.org/cgit/patch.git/commit/src/pch.c?id=a0d7fe4589651c64bd16ddaaa634030bb0455866

[Vendor Advisory] https://usn.ubuntu.com/3624-1/

Scores

CVSS v3 5.5

EPSS 0.0040

EPSS Percentile 60.4%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-119

Status published

Affected Products (1)

gnu/patch < 2.7.6

Timeline

Published Feb 13, 2018

Tracked Since Feb 18, 2026