Lucene search

K
rosalinuxROSA LABROSA-SA-2024-2435
HistoryJun 27, 2024 - 10:16 a.m.

Advisory ROSA-SA-2024-2435

2024-06-2710:16:38
ROSA LAB
abf.rosalinux.ru
1
vim 9.0.2130
vulnerability
ga_grow_inner function
denial of service
fixed
rosa-chrome
integer overflow
unix
software protocol

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

software: vim 9.0.2130
WASP: ROSA-CHROME

package_evr_string: vim-9.0.2130-1

CVE-ID: CVE-2023-46246
BDU-ID: 2023-07250
CVE-Crit: LOW
CVE-DESC.: A vulnerability in the ga_grow_inner function of the vim text editor, protocol for software Unix is caused by an integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update vim

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchvim< 9.0.2130UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%