First published: Mon Feb 05 2024(Updated: )
Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Vim Vim | <9.0.2142 | |
ubuntu/vim | <2:8.0.1453-1ubuntu1.13+ | 2:8.0.1453-1ubuntu1.13+ |
ubuntu/vim | <2:9.0.2189-1 | 2:9.0.2189-1 |
ubuntu/vim | <2:8.1.2269-1ubuntu5.22 | 2:8.1.2269-1ubuntu5.22 |
ubuntu/vim | <2:8.2.3995-1ubuntu2.16 | 2:8.2.3995-1ubuntu2.16 |
ubuntu/vim | <2:9.0.1672-1ubuntu2.3 | 2:9.0.1672-1ubuntu2.3 |
ubuntu/vim | <2:7.4.052-1ubuntu3.1+ | 2:7.4.052-1ubuntu3.1+ |
ubuntu/vim | <2:7.4.1689-3ubuntu1.5+ | 2:7.4.1689-3ubuntu1.5+ |
debian/vim | <=2:8.1.0875-5+deb10u2<=2:8.1.0875-5+deb10u6<=2:8.2.2434-3+deb11u1<=2:9.0.1378-2 | 2:9.1.0016-1 2:9.1.0199-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.