Wind River Support Network

HomeDefectsLIN1019-2197
Fixed

LIN1019-2197 : Security Advisory - patch - CVE-2018-20969

Created: Aug 18, 2019    Updated: Mar 10, 2020
Resolved Date: Jan 21, 2020
Found In Version: 10.19.45.1
Fix Version: 10.19.45.4
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

CREATE(Triage):(User=admin) CVE-2018-20969

CVEs


Live chat
Online