p PatchFirst

CVE-2015-1416

CVE-2015-1416

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file.

CVSS 7.8 · High · EPSS 3.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • patch Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.5-1

    Update to 2.5-1

  • patch Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.5-1

    Update to 2.5-1

  • patch Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.5-1

    Update to 2.5-1

Original sources

Check your server →