The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade neovimUpgrade vim | Aug 22, 2024 | Feb 27, 2017 |
| Amazon_linux | — | Upgrade vim | Mar 30, 2017 | Feb 27, 2017 |
| Debian | — | Upgrade neovimUpgrade vim | Mar 31, 2017 | Feb 27, 2017 |
| Gentoo Linux | — | Upgrade app-editors/vim.Upgrade app-editors/gvim. | Oct 30, 2017 | Feb 27, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-commonUpgrade vim-enhanced | Nov 30, 2017 | Feb 27, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-commonUpgrade vim-minimal | Nov 30, 2017 | Feb 27, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 13, 2017 |
| Suse | — | Upgrade vim-data-commonUpgrade gvimUpgrade vim-dataUpgrade vim-smallUpgrade vim | Jun 30, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade vim-runtimeUpgrade vim-commonUpgrade vim-common (Ubuntu Pro)Upgrade vim-gui-common (Ubuntu Pro)Upgrade vim (Ubuntu Pro)Upgrade vim-runtime (Ubuntu Pro)Upgrade vim-gui-commonUpgrade vim | Mar 24, 2020 | Feb 27, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub