CVE-2017-5953

2017-02-1007:59:00

Alpine Linux Development Team

security.alpinelinux.org

0.01 Low

EPSS

Percentile

83.9%

JSON

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchneovim< 0.2.0-r0UNKNOWN
Alpineedge-mainnoarchvim< 8.0.0329-r0UNKNOWN
Alpine3.10-communitynoarchneovim< 0.2.0-r0UNKNOWN
Alpine3.10-mainnoarchvim< 8.0.0329-r0UNKNOWN
Alpine3.11-communitynoarchneovim< 0.2.0-r0UNKNOWN
Alpine3.11-mainnoarchvim< 8.0.0329-r0UNKNOWN
Alpine3.12-communitynoarchneovim< 0.2.0-r0UNKNOWN
Alpine3.12-mainnoarchvim< 8.0.0329-r0UNKNOWN
Alpine3.13-communitynoarchneovim< 0.2.0-r0UNKNOWN
Alpine3.13-mainnoarchvim< 8.0.0329-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	neovim	< 0.2.0-r0	UNKNOWN
Alpine	edge-main	noarch	vim	< 8.0.0329-r0	UNKNOWN
Alpine	3.10-community	noarch	neovim	< 0.2.0-r0	UNKNOWN
Alpine	3.10-main	noarch	vim	< 8.0.0329-r0	UNKNOWN
Alpine	3.11-community	noarch	neovim	< 0.2.0-r0	UNKNOWN
Alpine	3.11-main	noarch	vim	< 8.0.0329-r0	UNKNOWN
Alpine	3.12-community	noarch	neovim	< 0.2.0-r0	UNKNOWN
Alpine	3.12-main	noarch	vim	< 8.0.0329-r0	UNKNOWN
Alpine	3.13-community	noarch	neovim	< 0.2.0-r0	UNKNOWN
Alpine	3.13-main	noarch	vim	< 8.0.0329-r0	UNKNOWN