Description
Use After Free in GitHub repository vim/vim prior to v9.0.2010.
CVSS breakdown
CVSS 3.0
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- fedoraproject / fedora37 – 37
- fedoraproject / fedora38 – 38
- fedoraproject / fedora39 – 39
- neovim / neovim0.9.5
- vim / vim9.0.2010
- vim / vim/vimunspecified – v9.0.2010
References
- MISChttps://huntr.dev/bounties/2c2d85a7-1171-4014-bf7f-a2451745861f
- PATCHhttps://github.com/vim/vim/commit/41e6f7d6ba67b61d911f9b1d76325cd79224753d
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VDDWD25AZIHBAA44HQT75OWLQ5UMDKU3/
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VGTVLUV7UCXXCZAIQIUCLG6JXAVYT3HE/
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPT7NMYJRLBPIALGSE24UWTY6F774GZW/
Updated 29m ago · 8 sources