REDHAT-BUG-1185262: Low severity GNU patch vulnerability
It was reported [1] that a crafted diff file (attached) can make patch to eat memory and later segfault. Upstream commit that fixes this: http://git.savannah.gnu.org/cgit/patch.git/commit/?id=0c08d7a902c6fdd49b704623a12d8d672ef18944
[1]: https://savannah.gnu.org/bugs/?44051
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1185262?
REDHAT-BUG-1185262 highlights a memory consumption issue that can lead to a segmentation fault.
How do I fix REDHAT-BUG-1185262?
To resolve REDHAT-BUG-1185262, update the GNU patch to the version that includes the upstream commit fixing the issue.
Who is affected by REDHAT-BUG-1185262?
Users of the GNU patch tool are affected by the vulnerability described in REDHAT-BUG-1185262.
Can REDHAT-BUG-1185262 lead to data loss?
While REDHAT-BUG-1185262 does not directly indicate data loss, it can cause application crashes that may lead to unintended data loss during operations.
What causes the problem in REDHAT-BUG-1185262?
The problem in REDHAT-BUG-1185262 is caused by a crafted diff file that improperly handles memory allocation leading to severe errors.