Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2017-6349 PUBLISHED CVSS 9.800000190734863 CRITICAL

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

Risk Scores

CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.16vim0, 8.0.1424-r1, 8.0.1424-r0
Alpine:v3.14vim7.4.1591-r0, 8.0.1424-r1, 8.0.1424-r0
Alpine:v3.13vim7.2.284-r0, 8.0.1424-r1, 8.0.1424-r0
Alpine:v3.18vim8.0.1424-r1, 0, 7.2.284-r0
Alpine:v3.20vim8.0.1424-r1, 8.0.1424-r0, 8.0.1367-r0
Alpine:v3.19vim7.2.284-r0, 8.0.1424-r1, 8.0.1424-r0
Alpine:v3.11vim0, 8.0.1424-r1, 8.0.1424-r0
Alpine:v3.23vim0, 7.2.284-r0, 7.2.394-r0
Alpine:v3.15vim8.0.1424-r1, 8.0.1424-r0, 8.0.1367-r0
Alpine:v3.9vim8.0.1424-r1, 0, 7.2.284-r0
Alpine:v3.10vim0, 8.0.1424-r1, 8.0.1424-r0
Alpine:v3.22vim8.0.1424-r1, 0, 7.2.284-r0
Alpine:v3.21vim0, 7.2.284-r0, 7.2.394-r0
Alpine:v3.12vim0, 8.0.1424-r1, 8.0.1424-r0
Alpine:v3.17vim7.2.284-r0, 0, 8.0.1424-r1
Alpine:v3.8vim0, 7.2.284-r0, 7.2.394-r0

Timeline

References

Open in Interactive Console →