ALT-PU-2024-7203-3
Closed vulnerabilities
Published: 2024-02-05
BDU:2024-02840
Уязвимость функции Did_set_langmap() текстового редактора vim, позволяющая нарушителю выполнить произвольный код
Severity: HIGH (7.8)
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2024-02-05
Modified: 2025-02-05
Modified: 2025-02-05
CVE-2024-22667
Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
- https://gist.githubusercontent.com/henices/2467e7f22dcc2aa97a2453e197b55a0c/raw/7b54bccc9a129c604fb139266f4497ab7aaa94c7/gistfile1.txt
- https://gist.githubusercontent.com/henices/2467e7f22dcc2aa97a2453e197b55a0c/raw/7b54bccc9a129c604fb139266f4497ab7aaa94c7/gistfile1.txt
- https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47
- https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47
- FEDORA-2024-12513b5cee
- FEDORA-2024-12513b5cee
- FEDORA-2024-1c85d5b179
- FEDORA-2024-1c85d5b179
- https://security.netapp.com/advisory/ntap-20240223-0008/
- https://security.netapp.com/advisory/ntap-20240223-0008/
Closed bugs
incorrect output with -i flag
vim-common and vim-minimal conflict on merged-usr