CVE-2015-1396

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4

published November 25, 2019

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03253 · 88.2th percentile
Published
2019-11-25T15:44Z
EPSS history
Timeline
  • 25 NOV 15:44Z
    A Directory Traversal vulnerability exists in the GNU patch before 2.7.4
    cvelistv5