CVE-2015-1416: Critical severity freebsd kernel vulnerability

Published Feb 5, 2018

Updated

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file.

Affected Software

3 affected components

FreeBSD FreeBSD=10.0

FreeBSD FreeBSD=10.1

FreeBSD FreeBSD=10.2

Event History

Feb 5, 2018

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1416?

CVE-2015-1416 is considered to have a high severity level due to the potential for arbitrary command execution.

How do I fix CVE-2015-1416?

To fix CVE-2015-1416, upgrade to the patched versions of FreeBSD or GNU patch as specified in the vulnerability advisory.

Which versions are affected by CVE-2015-1416?

CVE-2015-1416 affects FreeBSD 10.0, 10.1, and 10.2 before specific patched versions are applied.

What type of attack does CVE-2015-1416 facilitate?

CVE-2015-1416 facilitates remote attackers to execute arbitrary shell commands via crafted patch files.

Is CVE-2015-1416 specific to certain operating systems?

Yes, CVE-2015-1416 is specifically related to vulnerabilities in FreeBSD and possibly other patch variants.