CVE-2018-20969

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a !

published August 16, 2019

CVSS
—
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02684 · 85.6th percentile
Published
2019-08-16T03:36Z
EPSS history
Timeline
  • 16 AUG 03:36Z
    do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a !
    cvelistv5