CVE-2018-6951 describes a denial-of-service vulnerability in GNU patch versions up to 2.7.6, including Canonical's implementations, caused by a NULL pointer dereference in the intuit_diff_type function. This issue, dubbed a "mangled rename" problem, can lead to a segmentation fault. With a CVSS score of 7.5 (High), it can be exploited remotely with low attack complexity, resulting in high availability impact without requiring user interaction or privileges. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.7.6CPE matchmatch criteria | cpe:2.3:a:gnu:patch:*:*:*:*:*:*:*:* | ||
14.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | ||
16.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | ||
17.10CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2018-6951
Jun 11, 2024CVE-2018-6951
Aug 11, 2020An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault associated with a NULL pointer dereference leading to a denial of service in the intuit_diff_type function in pch.c aka a "mangled rename" issue.
Feb 13, 2018patch: NULL pointer dereference in pch.c:intuit_diff_type() causes a crash
Feb 3, 2018