CVE-2015-1196: gnu patch Link Following

CVSS: 4.3v2.0MediumModified

AliasesUBUNTU-CVE-2015-1196DEBIAN-CVE-2015-1196

Published 21-01-2015Last modified 06-08-2024

Vulnerability summary

CVE-2015-1196 is a medium (CVSS 4.3) Link Following vulnerability in gnu patch. EPSS estimates a 6.15% chance of exploitation in the next 30 days, higher than 93.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

6.15%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 4 · Related 3

MGASA-2015-0068 OPENSUSE-SU-2024:10379-1 SUSE-SU-2015:1019-1 USN-2651-1

Timeline

21-01-2015
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

6.15%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 6.15% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugs.debian.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-59Improper Link Resolution Before File Access ('Link Following')The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected systems

Debian1 product

patch< 2.7.1-7

Gnu1 product

patch2.7.1

Opensuse1 product

opensuseEOL13.1 | 13.2

Oracle1 product

solarisEOL11.2

Ubuntu1 product

patch< 2.7.1-4ubuntu2.3

5 vendors · 5 products

References

12 links

git.savannah.gnu.org/cgit/patch.git/commit/?id=4e9269a5fc1fe80a1095a92593dd85db871e1fd3X Refsource CONFIRMPatch
www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlX Refsource CONFIRMThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1182154X Refsource CONFIRMIssue TrackingThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/72074VDB EntryX Refsource BIDThird Party Advisory
bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227X Refsource CONFIRMExploit
seclists.org/oss-sec/2015/q1/173Mailing ListX Refsource MLISTThird Party Advisory
lists.opensuse.org/opensuse-updates/2015-02/msg00013.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/99967VDB EntryX Refsource XF
ubuntu.com/security/CVE-2015-1196REPORT
ubuntu.com/security/notices/USN-2651-1Advisory

Show all 12 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities