Memory corruption in Gnu - CVE-2016-10713

Vulnerability identifier: #VU10656

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-10713

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists due to out-of-bounds access within pch_write_line() in pch.c. A local attacker can supply a specially crafted input, trigger memory corruption and cause the system to crash.

Gnu
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
SUSE Linux
Fedora
patch (Alpine package)
patch

Update to version 2.7.6-1.

patch (Alpine package) - update to 2.7.5-r3
patch - addressed in versions 2.7.6-3.fc26, 2.7.6-3.fc27

• https://git.savannah.gnu.org/cgit/patch.git/commit/src/pch.c?id=a0d7fe4589651c64bd16ddaaa634030bb045...

• Arch Linux update for GNU
• SUSE Linux update for patch
• OpenSUSE Linux update for patch
• SUSE Linux update for patch
• Red Hat update for GNU patch
• Memory corruption in patch (Alpine package)
• Fedora 27 update for patch
• Fedora 26 update for patch