Invalid Pointer Vulnerability in GNU Patch by GNU
CVE-2021-45261

5.5MEDIUM

Key Information:

Vendor
Gnu
Status
Patch
Vendor
CVE Published:
22 December 2021

Summary

An Invalid Pointer vulnerability exists in GNU Patch 2.7 through the another_hunk function, enabling a malicious actor to trigger a Denial of Service condition. This is caused by improper memory handling, potentially impacting the application's stability and availability.

References

https://savannah.gnu.org/bugs/?61685
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.