Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU…

Description

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file.

Scores

EPSS (exploitation in 30 days)

3.5% · top 11% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

• n/a
• CWE-264 (opens in a new tab)All about CWE-264 and its CVEs

Affected products

• n/a

  • affected n/a

References (7)

• [oss-security] 20150801 Re: CVE-2015-1416: vulnerability in patch(1) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• [oss-security] 20150730 CVE-2015-1416: vulnerability in patch(1) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• [oss-security] 20150801 Re: CVE-2015-1416: vulnerability in patch(1) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• FreeBSD-SA-15:14 (opens in a new tab)vendor-advisoryx_refsource_FREEBSDx_transferred
• 1033110 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• 76116 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• [oss-security] 20150802 Re: CVE-2015-1416: vulnerability in patch(1) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2015-1416](https://trackcve.app/badge/CVE-2015-1416.svg)](https://trackcve.app/cve/CVE-2015-1416)

Record last updated 6 Aug 2024, 04:40 UTC.