The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vimUpgrade neovim | Aug 22, 2024 | Feb 27, 2017 |
| Amazon_linux | — | Upgrade vim | Mar 30, 2017 | Feb 27, 2017 |
| Debian | — | Upgrade neovimUpgrade vim | Mar 31, 2017 | Feb 27, 2017 |
| Gentoo Linux | — | Upgrade app-editors/vim.Upgrade app-editors/gvim. | Oct 30, 2017 | Feb 27, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade vim-filesystemUpgrade vim-commonUpgrade vim-minimalUpgrade vim-enhanced | Jun 17, 2020 | Feb 27, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade vim-minimalUpgrade vim-filesystemUpgrade vim-commonUpgrade vim-enhanced | Jun 28, 2018 | Feb 27, 2017 |
| Suse | — | Upgrade vim-data-commonUpgrade vim-dataUpgrade gvimUpgrade vimUpgrade vim-small | Jun 30, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade vim-runtime (Ubuntu Pro)Upgrade vim-commonUpgrade vim-gui-commonUpgrade vim-runtimeUpgrade vim-common (Ubuntu Pro)Upgrade vim-gui-common (Ubuntu Pro)Upgrade vimUpgrade vim (Ubuntu Pro) | Mar 24, 2020 | Feb 27, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub