Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004 | Aug 28, 2015 | Mar 11, 2011 |
| Apple Osx Patch | — | Upgrade macOS to the latest versionApply OS X security update 2011-004 | Dec 16, 2011 | Mar 11, 2011 |
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Oracle Solaris | — | Upgrade text/gnu-patch to version 2.7.1-0.175.2.4.0.5.0 on Solaris 11.2 | May 29, 2017 | Mar 11, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 30, 2010 |
| Suse | — | Upgrade patch | Aug 9, 2024 | Jan 14, 2011 |
| Ubuntu | — | Upgrade patch | Nov 8, 2024 | Mar 11, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub