Logo
›
›vulnerability›CVE-2018-1000156
Name
CVE-2018-1000156
Source
NVD ( link)Debian ( link)
Description
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
CWEs
CWE-20
Published Date
Updated Date
Workaround
-
Advisories
http://rachelbythebay.com/w/2018/04/05/bangpatch/Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1199Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1200Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2091Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2092Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2093Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2094Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2095Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2096Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2097Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894667#19Issue Tracking
https://lists.debian.org/debian-lts-announce/2018/04/msg00013.htmlMailing List
https://savannah.gnu.org/bugs/index.php?53566Vendor Advisory
https://security.gentoo.org/glsa/201904-17Third Party Advisory
https://usn.ubuntu.com/3624-1/Third Party Advisory
https://usn.ubuntu.com/3624-2/Third Party Advisory
http://rachelbythebay.com/w/2018/04/05/bangpatch/Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1199Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1200Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2091Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2092Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2093Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2094Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2095Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2096Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2097Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894667#19Issue Tracking
https://lists.debian.org/debian-lts-announce/2018/04/msg00013.htmlMailing List
https://savannah.gnu.org/bugs/index.php?53566Vendor Advisory
https://security.gentoo.org/glsa/201904-17Third Party Advisory
https://twitter.com/kurtseifried/status/982028968877436928Third Party Advisory
https://usn.ubuntu.com/3624-1/Third Party Advisory
https://usn.ubuntu.com/3624-2/Third Party Advisory

Analysis#

Affected Component
Analysis
patch
Patched

Vulnerability Ratings#

7.8
other
6.8
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
patch
buildroot
master
2.7.6
Patched
patch
openwrt
master
2.8-r1
Not Affected
patch
openwrt
openwrt-25.12
2.8-r1
Not Affected
patch
yocto
kirkstone
2.7.6
Patched
patch
yocto
master
2.8
Not Affected
patch
yocto
scarthgap
2.7.6
Patched

Resolved with patches#

patch (buildroot:2025.02.x)

#
Title
Author
Resolve
1
Fix arbitrary command execution in ed-style patches
Andreas Gruenbacher <agruen@gnu.org>
CVE-2018-1000156

patch (buildroot:master)

#
Title
Author
Resolve
1
Fix arbitrary command execution in ed-style patches
Andreas Gruenbacher <agruen@gnu.org>
CVE-2018-1000156

patch (yocto:kirkstone)

#
Title
Author
Resolve
1
Don't leak temporary file on failed multi-file ed-style patch
Jean Delvare <jdelvare@suse.de>
CVE-2018-1000156
2
Don't leak temporary file on failed ed-style patch
Jean Delvare <jdelvare@suse.de>
CVE-2018-1000156
3
Allow input files to be missing for ed-style patches
Andreas Gruenbacher <agruen@gnu.org>
CVE-2018-1000156
4
Fix arbitrary command execution in ed-style patches (CVE-2018-1000156)
Andreas Gruenbacher <agruen@gnu.org>
CVE-2018-1000156

patch (yocto:scarthgap)

#
Title
Author
Resolve
1
Don't leak temporary file on failed multi-file ed-style patch
Jean Delvare <jdelvare@suse.de>
CVE-2018-1000156
2
Don't leak temporary file on failed ed-style patch
Jean Delvare <jdelvare@suse.de>
CVE-2018-1000156
3
Allow input files to be missing for ed-style patches
Andreas Gruenbacher <agruen@gnu.org>
CVE-2018-1000156
4
Fix arbitrary command execution in ed-style patches (CVE-2018-1000156)
Andreas Gruenbacher <agruen@gnu.org>
CVE-2018-1000156