CVE catalog

CVE-2021-45261

patch: CVE-2021-45261

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.76% · Oct 25, 2026

An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpatchsid2.8.1-1vulnerable
Debianpatchforky2.8.1-1vulnerable
Debianpatchtrixie2.8-2vulnerable
Debianpatchbookworm2.7.6-7vulnerable
Susepatchlinux micro 6.02.7.6-4.1fixed
Susepatchlinux micro 6.12.7.6-slfo.1.1_2.1fixed
Susepatchlinux enterprise server ltss extended security 12 sp52.7.5-8.14.1fixed
Opensusepatchleap 16.02.7.6-160000.3.1fixed
Opensusepatchtumbleweed2.8-2.1fixed
Susepatchlinux micro 6.22.7.6-160000.3.1fixed
Susepatchlinux enterprise server 16.02.7.6-160000.3.1fixed
Susepatchlinux enterprise server for sap applications 16.02.7.6-160000.3.1fixed
Susepatchlinux enterprise module for basesystem 15 sp72.7.6-150000.5.9.1fixed
Opensusepatchleap 15.62.7.6-150000.5.9.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpatchsourcesid(unfixed)unimportantNot reportedNot reported
Debianpatchsourceforky(unfixed)unimportantNot reportedNot reported
Debianpatchsourcetrixie(unfixed)unimportantNot reportedNot reported
Debianpatchsourcebookworm(unfixed)unimportantNot reportedNot reported
Susepatchrpmlinux micro 6.02.7.6-4.1Not reportedSUSE-SU-2026:23210-1Not reported
Susepatchrpmlinux micro 6.12.7.6-slfo.1.1_2.1Not reportedSUSE-SU-2026:22905-1Not reported
Susepatchrpmlinux enterprise server ltss extended security 12 sp52.7.5-8.14.1Not reportedSUSE-SU-2026:2922-1Not reported
Opensusepatchrpmleap 16.02.7.6-160000.3.1Not reportedOPENSUSE-SU-2026:20227-1Not reported
Opensusepatchrpmtumbleweed2.8-2.1Not reportedOPENSUSE-SU-2026:10140-1Not reported
Susepatchrpmlinux micro 6.22.7.6-160000.3.1Not reportedSUSE-SU-2026:20343-1Not reported
Susepatchrpmlinux enterprise server 16.02.7.6-160000.3.1Not reportedSUSE-SU-2026:20431-1Not reported
Susepatchrpmlinux enterprise server for sap applications 16.02.7.6-160000.3.1Not reportedSUSE-SU-2026:20431-1Not reported
Susepatchrpmlinux enterprise module for basesystem 15 sp72.7.6-150000.5.9.1Not reportedSUSE-SU-2026:0781-1Not reported
Opensusepatchrpmleap 15.62.7.6-150000.5.9.1Not reportedSUSE-SU-2026:0781-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [patch]Affected
    Details (2)

    • 2.7.6-7 · amd64 · bookworm

      Affected

      dsa · patch · debian · bookworm; dsa · patch · debian · 12

    • 2.7.6-7 · arm64 · bookworm

      Affected

      dsa · patch · debian · bookworm; dsa · patch · debian · 12

[Debian 13 (Trixie)]

  • [patch]Affected
    Details (2)

    • 2.8-2 · amd64 · trixie

      Affected

      dsa · patch · debian · 13

    • 2.8-2 · arm64 · trixie

      Affected

      dsa · patch · debian · 13

[openSUSE Tumbleweed]

  • [patch]Fixed

    Source package: [patch]

    Details (1)

    • 2.8-3.2 · x86_64 · tumbleweed

      Fixed · Fixed: 2.8-2.1

      dsa · patch · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]