First published: Wed Mar 25 2020(Updated: )
GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GNU patch | <=2.7.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.