Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2016-2338

Критический

ALT-PU-2016-2338: package vim update to version 8.0.95-alt1

Источник
errata.altlinux.org
Дата публикации
22.11.2016
Дата обновления
22.11.2016
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades vim to version 8.0.95-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 9 лет назад

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

CVSS3: 2.5
redhat
почти 10 лет назад

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

CVSS3: 9.8
nvd
больше 9 лет назад

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

CVSS3: 9.8
debian
больше 9 лет назад

vim before patch 8.0.0322 does not properly validate values for tree l ...

CVSS3: 7.8
ubuntu
почти 10 лет назад

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.