CVE-2015-1416
- Source
- https://cve.org/CVERecord?id=CVE-2015-1416
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2015-1416.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2015-1416
- Downstream
- Published
- 2018-02-05T16:29:00Z
- Modified
- 2026-04-10T03:45:07.799292Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file.
- References
-
- http://www.openwall.com/lists/oss-security/2015/07/30/9
- http://www.openwall.com/lists/oss-security/2015/08/01/4
- http://www.openwall.com/lists/oss-security/2015/08/02/1
- http://www.openwall.com/lists/oss-security/2015/08/02/6
- http://www.securityfocus.com/bid/76116
- http://www.securitytracker.com/id/1033110
- https://www.freebsd.org/security/advisories/FreeBSD-SA-15:14.bsdpatch.asc
- http://www.openwall.com/lists/oss-security/2015/07/30/9
- http://www.openwall.com/lists/oss-security/2015/08/01/4
- http://www.openwall.com/lists/oss-security/2015/08/02/1
- http://www.openwall.com/lists/oss-security/2015/08/02/6