CVE-2017-6350

🗓️ 27 Feb 2017 00:00:00Reported by ubuntu.comType

An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, leading to buffer overflows

Reporter	Title	Published	Views	Family All 45
Tenable Nessus	EulerOS 2.0 SP2 : vim (EulerOS-SA-2017-1149)	8 Aug 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : vim (EulerOS-SA-2017-1148)	8 Aug 201700:00	–	nessus
Tenable Nessus	Fedora 24 : 2:vim (2017-e9171a0c00)	6 Mar 201700:00	–	nessus
Tenable Nessus	Debian DLA-850-1 : vim security update	10 Mar 201700:00	–	nessus
Tenable Nessus	Photon OS 1.0: Vim PHSA-2017-0007 (deprecated)	17 Aug 201800:00	–	nessus
Tenable Nessus	Fedora 25 : 2:vim (2017-8494d0142c)	3 Mar 201700:00	–	nessus
Tenable Nessus	Photon OS 1.0: Vim PHSA-2017-0007	7 Feb 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2017-809)	30 Mar 201700:00	–	nessus
Tenable Nessus	GLSA-201706-26 : Vim, gVim: Remote execution of arbitrary code	23 Jun 201700:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : vim (SUSE-SU-2017:1712-1)	29 Jun 201700:00	–	nessus

Source	Link
groups	www.groups.google.com/forum/
groups	www.groups.google.com/forum/
ubuntu	www.ubuntu.com/security/notices/USN-4309-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-6350
launchpad	www.launchpad.net/bugs/cve/CVE-2017-6350
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-6350

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	14.04	noarch	vim	2:7.4.052-1ubuntu3.1+esm1	UNKNOWN
ubuntu	16.04	noarch	vim	2:7.4.1689-3ubuntu1.4	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Feb 2017 00:00Current

9.2High risk

Vulners AI Score9.2

CVSS27.5

CVSS39.8

EPSS0.009