CVE-2018-6951

—

CVSS 3.0

7.5 high

EPSS

8%p95

Published

Feb 13, 2018 (Feb 13, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.

Vendors: gnu canonical
Products: patch, ubuntu linux
Weakness: CWE-476
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (8.4%)

In the news0 stories

No ingested article mentions this CVE yet.