Описание
vim is vulnerable to Heap-based Buffer Overflow
It was found that vim was vulnerable to a 1 byte heap based out of bounds read flaw in the compile_get_env() function. A file could use that flaw to disclose 1 byte of vim's internal memory.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | vim | Not affected | ||
| Red Hat Enterprise Linux 7 | vim | Not affected | ||
| Red Hat Enterprise Linux 8 | vim | Not affected | ||
| Red Hat Enterprise Linux 9 | vim | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=2039846vim: heap-based read buffer overflow in compile_get_env()
EPSS
Процентиль: 75%
0.01709
Низкий
3.3 Low
CVSS3
EPSS
Процентиль: 75%
0.01709
Низкий
3.3 Low
CVSS3