Heap-based buffer overflow in Vim - CVE-2024-43802

Vulnerability identifier: #VU96494

CSH Severity: Low

CVSS v4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-43802

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary error within the ins_typebuf() function. A remote attacker can trick the victim to open a specially crafted file, trigger a heap-based buffer overflow and crash the application.

Vim
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Ubuntu
Basesystem Module
Desktop Applications Module
openSUSE Leap
openEuler
Anolis OS
Fedora
vim (Ubuntu package)
vim-minimal
vim-filesystem
vim-enhanced
vim-debugsource
vim-debuginfo
vim-common
vim-X11
vim
vim-data
vim-doc
gvim-debuginfo
gvim
vim-data-common
xxd
vim-small
vim-small-debuginfo
SmartFabric Manager
APEX Cloud Platform for Microsoft Azure
SmartFabric OS10
APEX Cloud Platform for Red Hat OpenShift

Install updates from vendor's website.

Vim - update to 9.1.0697
vim (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.25, 2:8.2.3995-1ubuntu2.19, 2:9.1.0016-1ubuntu7.3
SmartFabric Manager - update to 1.3.0
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
vim-minimal - update to 9.0-27
vim-filesystem - update to 9.0-27
vim-enhanced - update to 9.0-27
vim-debugsource - update to 9.0-27
vim-debuginfo - update to 9.0-27
vim-common - update to 9.0-27
vim-X11 - update to 9.0-27
vim - update to 9.0-27
vim-filesystem - update to 9.0.2092-6
vim-X11 - update to 9.0.2092-6
vim-common - update to 9.0.2092-6
vim-enhanced - update to 9.0.2092-6
vim-minimal - update to 9.0.2092-6
vim-data - update to 9.0.2092-6
vim-doc - update to 9.0.2092-6
vim - addressed in versions 9.1.703-1.fc39, 9.1.703-1.fc40, 9.1.703-1.fc41, 9.1.719-1.fc39
vim-debuginfo - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
gvim-debuginfo - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150500.20.21.1
vim-debugsource - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
gvim - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150500.20.21.1
vim - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150500.20.21.1
vim-data-common - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
vim-data - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150500.20.21.1
xxd - update to 9.1.1101-150000.5.69.1
vim-small - addressed in versions 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
vim-small-debuginfo - addressed in versions 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
SmartFabric OS10 - update to 10.6.0.3

• https://github.com/vim/vim/security/advisories/GHSA-4ghr-c62x-cqfh

• Denial of service in Vim
• Fedora 41 update for vim
• Fedora 40 update for vim
• Fedora 39 update for vim
• openEuler update for vim
• Fedora 39 update for vim
• Ubuntu update for vim
• Ubuntu update for vim
• SUSE update for vim
• SUSE update for vim
• SUSE update for vim
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in Dell Networking OS10
• Dell SmartFabric Manager update for third-party components
• Anolis OS update for vim