Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-5953

Опубликовано: 10 фев. 2017
Источник: ubuntu
Приоритет: low
CVSS2: 7.5
CVSS3: 9.8

Описание

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

РелизСтатусПримечание
bionic

not-affected

0.2.2-3
cosmic

not-affected

0.2.2-3
devel

not-affected

0.2.2-3
disco

not-affected

0.2.2-3
eoan

not-affected

0.2.2-3
esm-apps/bionic

not-affected

0.2.2-3
esm-infra-legacy/trusty

DNE

precise

DNE

precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
artful

not-affected

2:8.0.0197-4ubuntu5
bionic

not-affected

2:8.0.1144-1ubuntu1
cosmic

not-affected

2:8.0.1144-1ubuntu1
devel

not-affected

2:8.0.1144-1ubuntu1
disco

not-affected

2:8.0.1144-1ubuntu1
eoan

not-affected

2:8.0.1144-1ubuntu1
esm-infra-legacy/trusty

released

2:7.4.052-1ubuntu3.1+esm1
esm-infra/bionic

not-affected

2:8.0.1144-1ubuntu1
esm-infra/xenial

released

2:7.4.1689-3ubuntu1.3
precise

ignored

end of life

Показывать по

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 2.5
redhat
почти 9 лет назад

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

CVSS3: 9.8
nvd
почти 9 лет назад

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

CVSS3: 9.8
debian
почти 9 лет назад

vim before patch 8.0.0322 does not properly validate values for tree l ...

suse-cvrf
почти 9 лет назад

Security update for vim

suse-cvrf
больше 8 лет назад

Security update for vim

7.5 High

CVSS2

9.8 Critical

CVSS3