Логотип exploitDog
bind: "CVE-2024-41957"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2024-41957"

Количество 7

Количество 7

ubuntu логотип

CVE-2024-41957

больше 1 года назад

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
EPSS: Низкий
redhat логотип

CVE-2024-41957

больше 1 года назад

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
EPSS: Низкий
nvd логотип

CVE-2024-41957

больше 1 года назад

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
EPSS: Низкий
msrc логотип

CVE-2024-41957

больше 1 года назад

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2024-41957

больше 1 года назад

Vim is an open source command line text editor. Vim < v9.1.0647 has do ...

CVSS3: 4.5
EPSS: Низкий
fstec логотип

BDU:2024-06478

больше 1 года назад

Уязвимость функции tagstack_clear_entry() файла src/alloc.c текстового редактора vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 4.5
EPSS: Низкий
redos логотип

ROS-20240827-10

больше 1 года назад

Множественные уязвимости vim

CVSS3: 4.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-41957

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2024-41957

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-41957

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
0%
Низкий
больше 1 года назад
msrc логотип
CVSS3: 5.3
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-41957

Vim is an open source command line text editor. Vim < v9.1.0647 has do ...

CVSS3: 4.5
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2024-06478

Уязвимость функции tagstack_clear_entry() файла src/alloc.c текстового редактора vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 4.5
0%
Низкий
больше 1 года назад
redos логотип
ROS-20240827-10

Множественные уязвимости vim

CVSS3: 4.5
больше 1 года назад

Уязвимостей на страницу