Updated: 2024-11-24 04:51:45.921722
Description:
Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `6bf131888` which has been included in version 9.0.2112. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Links | NIST | CIRCL | RHEL | Ubuntu |
Severity | Score | |
---|---|---|
CVSS Version 2.x | 0 | |
CVSS Version 3.x | MEDIUM | 4.3 |
OS name | Project name | Version | Score | Severity | Status | Errata | Last updated | Statement |
---|---|---|---|---|---|---|---|---|
AlmaLinux 9.2 ESU | vim | 8.2.2637 | 4.3 | MEDIUM | Ignored | 2025-01-16 01:49:08 | ||
CentOS 6 ELS | vim | 7.4.629 | 4.3 | MEDIUM | Ignored | 2023-12-01 03:18:49 | ||
CentOS 7 ELS | vim | 7.4.629 | 4.3 | MEDIUM | Ignored | 2024-06-25 11:20:07 | ||
CloudLinux 6 ELS | vim | 7.4.629 | 4.3 | MEDIUM | Ignored | 2023-12-01 03:18:49 | ||
Oracle Linux 6 ELS | vim | 7.4.629 | 4.3 | MEDIUM | Ignored | 2023-12-01 03:18:49 | ||
Ubuntu 16.04 ELS | vim | 7.4.1689-3 | 4.3 | MEDIUM | Released | CLSA-2024:1705077885 | 2024-01-12 13:09:47 |