A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are accepted rather than rejected.
Consequently, the utility can create files in arbitrary locations with the permissions of the executing user.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products
red hat:red hat hardened images
red hat:red hat enterprise linux 8
red hat:red hat enterprise linux 10
red hat:red hat enterprise linux 7
red hat:red hat enterprise linux 6
red hat:red hat enterprise linux 9