CVE-2015-1196 : GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlin

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.

Published 2015-01-21 18:59:57

Updated 2018-10-30 16:27:36

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2015-1196

GNU » Patch » Version: 2.7.1
cpe:2.3:a:gnu:patch:2.7.1:*:*:*:*:*:*:*
Matching versions
Oracle » Solaris » Version: 11.2
cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 13.2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 13.1
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.29%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 70 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Assigned by: nvd@nist.gov (Primary)

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227

#775227 - patch: CVE-2015-1196: directory traversal via symlinks - Debian Bug report logs
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=1182154

1182154 – (CVE-2015-1196) CVE-2015-1196 patch: directory traversal via symlinks
Issue Tracking;Third Party Advisory;VDB Entry
http://lists.opensuse.org/opensuse-updates/2015-02/msg00013.html

openSUSE-SU-2015:0199-1: moderate: Security update for patch
Third Party Advisory
http://www.securityfocus.com/bid/72074

GNU patch Directory Traversal Vulnerability
Third Party Advisory
http://seclists.org/oss-sec/2015/q1/173

oss-sec: Re: CVE request: directory traversal flaw in patch
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

Oracle Solaris Third Party Bulletin - July 2015
Third Party Advisory

CVEs referencing this url
http://git.savannah.gnu.org/cgit/patch.git/commit/?id=4e9269a5fc1fe80a1095a92593dd85db871e1fd3

patch.git - GNU patch
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/99967

GNU patch unspecified symlink CVE-2015-1196 Vulnerability Report

Jump to