Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Desktop 12 package patch, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (3)
CVE-2015-1395 — CVSS 7.5 (high): Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to…
CVE-2015-1396 — CVSS 7.5 (high): A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink…
CVE-2015-1196 — CVSS 4.3 (medium): GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.