Oval Definition:oval:com.ubuntu.bionic:def:2019136380000000
Revision Date:2019-07-26Version:1
Title:CVE-2019-13638 on Ubuntu 18.04 LTS (bionic) - medium.
Description:GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-13638
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND patch package in bionic was vulnerable but has been fixed (note: '2.7.6-2ubuntu1.1').
    • BACK