Логотип exploitDog
bind: "CVE-2024-41957"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2024-41957"

Количество 7

Количество 7

ubuntu логотип

CVE-2024-41957

11 месяцев назад

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
EPSS: Низкий
redhat логотип

CVE-2024-41957

11 месяцев назад

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
EPSS: Низкий
nvd логотип

CVE-2024-41957

11 месяцев назад

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
EPSS: Низкий
msrc логотип

CVE-2024-41957

10 месяцев назад

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2024-41957

11 месяцев назад

Vim is an open source command line text editor. Vim < v9.1.0647 has do ...

CVSS3: 4.5
EPSS: Низкий
fstec логотип

BDU:2024-06478

11 месяцев назад

Уязвимость функции tagstack_clear_entry() файла src/alloc.c текстового редактора vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 4.5
EPSS: Низкий
redos логотип

ROS-20240827-10

10 месяцев назад

Множественные уязвимости vim

CVSS3: 4.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-41957

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
0%
Низкий
11 месяцев назад
redhat логотип
CVE-2024-41957

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
0%
Низкий
11 месяцев назад
nvd логотип
CVE-2024-41957

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

CVSS3: 4.5
0%
Низкий
11 месяцев назад
msrc логотип
CVSS3: 5.3
0%
Низкий
10 месяцев назад
debian логотип
CVE-2024-41957

Vim is an open source command line text editor. Vim < v9.1.0647 has do ...

CVSS3: 4.5
0%
Низкий
11 месяцев назад
fstec логотип
BDU:2024-06478

Уязвимость функции tagstack_clear_entry() файла src/alloc.c текстового редактора vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 4.5
0%
Низкий
11 месяцев назад
redos логотип
ROS-20240827-10

Множественные уязвимости vim

CVSS3: 4.5
10 месяцев назад

Уязвимостей на страницу