kritisch
CVE-2017-6350
vim: Integer overflow at an unserialize_uep memory allocation site
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat2.5CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (niedrig), Amazon (niedrig), Ubuntu (niedrig).
Beschreibung
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.10 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.11 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.12 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.13 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.14 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.15 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.16 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.17 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.18 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.19 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.20 | neovim, vim | 0.2.0-r0 und 1 weitere |
| alpine 3.21 | neovim, vim | 0.2.0-r0 und 1 weitere |
Alle 67 Einträge aus 35 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.10 | neovim | 0.2.0-r0 |
| alpine 3.10 | vim | 8.0.1521-r0 |
| alpine 3.11 | neovim | 0.2.0-r0 |
| alpine 3.11 | vim | 8.0.1521-r0 |
| alpine 3.12 | neovim | 0.2.0-r0 |
| alpine 3.12 | vim | 8.0.1521-r0 |
| alpine 3.13 | neovim | 0.2.0-r0 |
| alpine 3.13 | vim | 8.0.1521-r0 |
| alpine 3.14 | neovim | 0.2.0-r0 |
| alpine 3.14 | vim | 8.0.1521-r0 |
| alpine 3.15 | neovim | 0.2.0-r0 |
| alpine 3.15 | vim | 8.0.1521-r0 |
| alpine 3.16 | neovim | 0.2.0-r0 |
| alpine 3.16 | vim | 8.0.1521-r0 |
| alpine 3.17 | neovim | 0.2.0-r0 |
| alpine 3.17 | vim | 8.0.1521-r0 |
| alpine 3.18 | neovim | 0.2.0-r0 |
| alpine 3.18 | vim | 8.0.1521-r0 |
| alpine 3.19 | neovim | 0.2.0-r0 |
| alpine 3.19 | vim | 8.0.1521-r0 |
| alpine 3.20 | neovim | 0.2.0-r0 |
| alpine 3.20 | vim | 8.0.1521-r0 |
| alpine 3.21 | neovim | 0.2.0-r0 |
| alpine 3.21 | vim | 8.0.1521-r0 |
| alpine 3.22 | neovim | 0.2.0-r0 |
| alpine 3.22 | vim | 8.0.1521-r0 |
| alpine 3.23 | neovim | 0.2.0-r0 |
| alpine 3.23 | vim | 8.0.1521-r0 |
| alpine 3.24 | neovim | 0.2.0-r0 |
| alpine 3.24 | vim | 8.0.1521-r0 |
| alpine 3.6 | neovim | 0.2.0-r0 |
| alpine 3.7 | neovim | 0.2.0-r0 |
| alpine 3.8 | neovim | 0.2.0-r0 |
| alpine 3.8 | vim | 8.0.1521-r0 |
| alpine 3.9 | neovim | 0.2.0-r0 |
| alpine 3.9 | vim | 8.0.1521-r0 |
| alpine edge | neovim | 0.2.0-r0 |
| alpine edge | vim | 8.0.1521-r0 |
| amazon linux 1 | vim-common | 2:8.0.0503-1.45.amzn1 |
| amazon linux 1 | vim-debuginfo | 2:8.0.0503-1.45.amzn1 |
| amazon linux 1 | vim-enhanced | 2:8.0.0503-1.45.amzn1 |
| amazon linux 1 | vim-filesystem | 2:8.0.0503-1.45.amzn1 |
| amazon linux 1 | vim-minimal | 2:8.0.0503-1.45.amzn1 |
| debian 11 | neovim | 0.1.7-4 |
| debian 11 | vim | 2:8.0.0197-3 |
| debian 12 | neovim | 0.1.7-4 |
| debian 12 | vim | 2:8.0.0197-3 |
| debian 13 | neovim | 0.1.7-4 |
| debian 13 | vim | 2:8.0.0197-3 |
| debian 14 | neovim | 0.1.7-4 |
| debian 14 | vim | 2:8.0.0197-3 |
| debian 7 | vim | 2:7.3.547-7+deb7u3 |
| debian 8 | vim | 2:7.4.488-7+deb8u3 |
| echo | neovim | 0.1.7-4 |
| echo | vim | 2:8.0.0197-3 |
| Red Hat | vim | kein Fix angegeben |
| Red Hat | vim-X11 | kein Fix angegeben |
| Red Hat | vim-common | kein Fix angegeben |
| Red Hat | vim-enhanced | kein Fix angegeben |
| Red Hat | vim-filesystem | kein Fix angegeben |
| Red Hat | vim-minimal | kein Fix angegeben |
| root.io alpine 3.18 | rootio-vim | 8.0.1521-r0 |
| root.io alpine 3.19 | rootio-vim | 8.0.1521-r0 |
| root.io debian 12 | rootio-vim | 2:8.0.0197-3 |
| ubuntu 14.04-ESM | vim | 2:7.4.052-1ubuntu3.1+esm1 |
| ubuntu 16.04 | vim | 2:7.4.1689-3ubuntu1.4 |
| ubuntu 16.04-ESM | vim | 2:7.4.1689-3ubuntu1.4 |
Referenzen
- http://www.securityfocus.com/bid/96448
- http://www.securitytracker.com/id/1037949
- https://access.redhat.com/security/cve/CVE-2017-6350
- https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75
- https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q
- https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y
- https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q
- https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y