CVE:CVE-2018-1000156
CNNVD:CNNVD-201804-246
GNU Patch是GNU项目中的一套用于生成补丁文件的工具。
GNU Patch 2.7.6 版本中存在输入验证漏洞。远程攻击者可借助补丁文件利用该漏洞执行任意命令。
solution:Upgrade gnu patch to a higher version than 2.7.6,and avoid the version 2.7.6; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.4,6.5,6.6,7.2,7.3,7.4,7.6,and avoid the version 6.4,6.5,6.6,7.2,7.3,7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.7,7.3,7.4,7.5,7.6,and avoid the version 6.7,7.3,7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.6,7.2,7.3,7.4,7.6,and avoid the version 6.6,7.2,7.3,7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0
solution:Upgrade json-jwt_project json-jwt to a higher version than 1.9.4,and avoid the version [0.5.0,1.9.4)