CVE-2021-45261

Publication date 22 December 2021

Last updated 9 November 2026

Ubuntu priority

Cvss 3 Severity Score

An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.

Show unmaintained releases

Package	Ubuntu Release	Status
patch	26.10 stonking	Vulnerable
	26.04 LTS resolute	Vulnerable
	25.10 questing	Ignored end of life, was deferred [2026-07-15]
	25.04 plucky	Ignored end of life, was deferred [2026-07-15]
	24.10 oracular	Ignored end of life, was deferred [2026-07-15]
	24.04 LTS noble	Vulnerable
	23.10 mantic	Ignored end of life, was deferred [2026-07-15]
	23.04 lunar	Ignored end of life, was deferred [2026-07-15]
	22.10 kinetic	Ignored end of life, was deferred [2026-07-15]
	22.04 LTS jammy	Vulnerable, fix deferred
	21.10 impish	Ignored end of life
	21.04 hirsute	Ignored end of life
	20.04 LTS focal	Vulnerable
	18.04 LTS bionic	Vulnerable
	16.04 LTS xenial	Vulnerable
	14.04 LTS trusty	Vulnerable

negligible security impact since it affects the CLI tool with a specific malformed patch file.

CVSS version: CVSS v3.0

Base score 5.5 · Medium

Base metrics

Scores

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H