GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop while attempting to locate the requested position. This results in excessive CPU consumption and prevents the process from completing. An attacker can trigger this behavior by supplying a maliciou…
GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop while attempting to locate the requested position. This results in excessive CPU consumption and prevents the process from completing. An attacker can trigger this behavior by supplying a maliciou…
Affected: openEuler:24.03-LTS-SP3: patch, openEuler:24.03-LTS-SP4: patch, openEuler:20.03-LTS-SP4: patch, openEuler:22.03-LTS-SP4: patch, openEuler:24.03-LTS-SP1: patch
Patch takes a patch file containing a difference listing produced by the diff program and applies those differences to one or more original files, producing patched versions. Security Fix(es):
GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-dif…
patch-2.8-3.1 on GA media
patch: GNU patch: Denial of Service via crafted unified-diff input
Security update for patch
Affected: Ubuntu:Pro:14.04:LTS: patch, Ubuntu:16.04:LTS: patch, Ubuntu:18.04:LTS: patch, Ubuntu:20.04:LTS: patch, Ubuntu:22.04:LTS: patch, Ubuntu:24.04:LTS: patch, Ubuntu:25.10: patch, Ubuntu:26.04:LTS: patch
GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an …
Ein Angreifer kann mehrere Schwachstellen in patch ausnutzen, um einen Denial of Service Angriff durchzuführen.