Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-6349

Опубликовано: 13 фев. 2017
Источник: redhat
CVSS3: 2.5
EPSS Низкий

Описание

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

An integer overflow flaw was found in the way vim handled undo files. This bug could result in vim crashing when trying to process corrupted undo files.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5vimNot affected
Red Hat Enterprise Linux 6vimNot affected
Red Hat Enterprise Linux 7vimNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=1427944vim: Integer overflow at a u_read_undo memory allocation site

EPSS

Процентиль: 73%
0.0077
Низкий

2.5 Low

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 9 лет назад

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

CVSS3: 9.8
nvd
почти 9 лет назад

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

CVSS3: 9.8
debian
почти 9 лет назад

An integer overflow at a u_read_undo memory allocation site would occu ...

CVSS3: 9.8
github
больше 3 лет назад

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

suse-cvrf
больше 8 лет назад

Security update for vim

EPSS

Процентиль: 73%
0.0077
Низкий

2.5 Low

CVSS3