{"schemaVersion":3,"id":"MGASA-2018-0448","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated patch packages fix security vulnerabilities\n\nA NULL pointer dereference flaw was found in the way patch processed\npatch files. An attacker could potentially use this flaw to crash patch\nby tricking it into processing crafted patches (CVE-2018-6951).\n\nA double-free flaw was found in the way the patch utility processed\npatch files. An attacker could potentially use this flaw to crash the\npatch utility by tricking it into processing crafted patches\n(CVE-2018-6952).","dates":{"published":"2018-11-15T22:04:32.000Z","modified":"2026-04-16T06:25:09.306Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"patch","name":"patch","label":"patch","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/patch","purlType":"rpm","versions":[{"text":"< 2.7.6-1.1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.6-1.1.mga6","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2018-0448.html","label":"advisories.mageia.org/MGASA-2018-0448.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23704","label":"bugs.mageia.org/show_bug.cgi?id=23704","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DTAZPKCAJTAOK6CYQP7SPWNXDIAG4A37/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-6951","CVE-2018-6952"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-11-15T22:04:32.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:25:09.306Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T13:59:39.172Z","stale":false,"partial":false}}