CVE-2016-10713 An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.
MediumCVSS 5.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/patch(Debian:12) | < 2.7.6-1 | 2.7.6-1 |
| debian/patch(Debian:13) | < 2.7.6-1 | 2.7.6-1 |
| debian/patch(Debian:14) | < 2.7.6-1 | 2.7.6-1 |
| GNU patch | < 2.7.6 | 2.7.6 |
| alpine/patch(Alpine:v3.4) | < 2.7.5-r3 | 2.7.5-r3 |
| alpine/patch(Alpine:v3.5) | < 2.7.5-r3 | 2.7.5-r3 |
| alpine/patch(Alpine:v3.6) | < 2.7.5-r3 | 2.7.5-r3 |
References
- Debian Security Tracker CVE-2016-10713 vendor-advisory
- 103063 third-party-advisory vdb-entry
- RHSA-2019:2033 vendor-advisory
- git.savannah.gnu.org patch vendor-advisory
- USN-3624-1 vendor-advisory
- USN-3624-2 vendor-advisory
- security.alpinelinux.org vendor-advisory