Denial Of Service (DoS)

2023-03-2415:37:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vim

dos attacks

null pointer dereference

utfc_ptr2len

mbyte.c

denial of service

0.001 Low

EPSS

Percentile

23.1%

JSON

vim is vulnerable to Denial of Service (DoS) attacks. NULL pointer dereference vulnerability in vim’s utfc_ptr2len() function in the mbyte.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering an issue that causes an application to crash, leading to a denial of service.

CPENameOperatorVersion
vim:focaleq2:8.1.2269-1ubuntu5
vim:edgeeq9.0.0369-r0
vim:edgeeq9.0.0598-r0
vim:edgeeq9.0.1085-r0
vim:edgeeq9.0.0999-r0
vim:edgeeq9.0.0820-r0
vim:edgeeq8.2.4969-r0
vim:edgeeq9.0.1251-r0
vim:edgeeq8.2.2800-r0
vim:edgeeq8.2.0735-r0

Name	Operator	Version
vim:focal	eq	2:8.1.2269-1ubuntu5
vim:edge	eq	9.0.0369-r0
vim:edge	eq	9.0.0598-r0
vim:edge	eq	9.0.1085-r0
vim:edge	eq	9.0.0999-r0
vim:edge	eq	9.0.0820-r0
vim:edge	eq	8.2.4969-r0
vim:edge	eq	9.0.1251-r0
vim:edge	eq	8.2.2800-r0
vim:edge	eq	8.2.0735-r0