Gentoo FoundationMGASA-2024-0285Updated vim packages fix security vulnerabilities
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
Confidence
Low
Use-after-free in tagstack_clear_entry() in Vim < v9.1.0647. (CVE-2024-41957) Use-after-free in alist_add() in Vim < v9.1.0678. (CVE-2024-43374)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | vim | < 9.1.719-1 | vim-9.1.719-1.mga9 |
References
bugs.mageia.org/show_bug.cgi?id=33504
openwall.com/lists/oss-security/2024/08/01/1
openwall.com/lists/oss-security/2024/08/01/2
openwall.com/lists/oss-security/2024/08/15/6
openwall.com/lists/oss-security/2024/08/22/3
openwall.com/lists/oss-security/2024/08/25/1
openwall.com/lists/oss-security/2024/08/31/1
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
Confidence
Low