Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2015-1395 →

DEBIAN-CVE-2015-1395

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary fi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. (dot dot) in a diff file name.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 patch

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.3-1"}]}]

Debian:13 patch

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.3-1"}]}]

Debian:14 patch

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.3-1"}]}]

Références

advisory security-tracker.debian.org