CVE-2024-43374: Vim heap-use-after-free in src/arglist.c:207
Last updated 5 September 2024
Other sources
The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers Buf autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the argument list that we are actually modifying. Once the autocommands are completed, the references to the window and argument list are no longer valid and as such cause an use-after-free. Impact is low since the user must either intentionally add some unusual autocommands that wipe a buffer during creation (either manually or by sourcing a malicious plugin), but it will crash Vim. The issue has been fixed as of Vim patch v9.1.0678.
— NVD
Vim heap-use-after-free in src/arglist.c:207
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43374?
CVE-2024-43374 has a severity rating that can allow for remote code execution due to a use-after-free error.
How do I fix CVE-2024-43374?
To fix CVE-2024-43374, upgrade the Vim editor to version 2:9.1.0709-1 or above on Debian and the appropriate patched version on Ubuntu.
Which versions of Vim are affected by CVE-2024-43374?
Vim versions prior to 9.1.0678 are affected by CVE-2024-43374.
Can CVE-2024-43374 be exploited remotely?
Yes, the use-after-free error in CVE-2024-43374 can potentially be exploited remotely through malicious autocommands.
Is it safe to use Vim versions before 9.1.0678 after CVE-2024-43374 is known?
No, it is not safe to use Vim versions before 9.1.0678 after CVE-2024-43374 is disclosed due to the security risk involved.