Lucene search

K
redosRedosROS-20240329-05
HistoryMar 29, 2024 - 12:00 a.m.

ROS-20240329-05

2024-03-2900:00:00
redos.red-soft.ru
9
vulnerabilities
vim text editor
insecure search path
buffer overflow
integer overflow
arbitrary code execution
unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.2%

Vulnerability in the vim text editor is related to the use of an insecure search path. Exploitation
exploitation of the vulnerability could allow an attacker to execute arbitrary code

Vulnerability in the vim_regsub_both function of the vim text editor is caused by a buffer overflow in dynamic memory.
memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code

The vim text editor vulnerability is due to writing outside buffer boundaries in memory. Exploitation
exploitation of the vulnerability could allow an attacker to execute arbitrary code

A vulnerability in the f_fullcommand function of the vim text editor is caused by an integer overflow.
Exploitation of the vulnerability may allow an attacker to execute arbitrary code

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64vim-x11<= 9.1.016-1UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.2%