Vim vulnerabilities

2024-09-0500:00:00

ubuntu.com

vim

ubuntu

vulnerabilities

memory handling

denial of service

code execution

cve-2024-41957

cve-2024-43374

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

7.4

Confidence

Low

JSON

Releases

Ubuntu 24.04 LTS
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

vim - Vi IMproved - enhanced vi editor

Details

It was discovered that Vim incorrectly handled memory when closing a
window, leading to a double-free vulnerability. If a user was tricked
into opening a specially crafted file, an attacker could crash the
application, leading to a denial of service, or possibly achieve code
execution with user privileges. (CVE-2024-41957)

It was discovered that Vim incorrectly handled memory when adding a new
file to an argument list, leading to a use-after-free. If a user was
tricked into opening a specially crafted file, an attacker could crash
the application, leading to a denial of service. (CVE-2024-43374)

OSVersionArchitecturePackageVersionFilename
Ubuntu24.04noarchvim< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-athena< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-common< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-dbgsym< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-doc< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-gtk3< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-gtk3-dbgsym< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-gui-common< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-motif< 2:9.1.0016-1ubuntu7.2UNKNOWN
Ubuntu24.04noarchvim-motif-dbgsym< 2:9.1.0016-1ubuntu7.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	24.04	noarch	vim	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-athena	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-common	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-dbgsym	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-doc	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-gtk3	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-gtk3-dbgsym	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-gui-common	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-motif	< 2:9.1.0016-1ubuntu7.2	UNKNOWN
Ubuntu	24.04	noarch	vim-motif-dbgsym	< 2:9.1.0016-1ubuntu7.2	UNKNOWN