Heap-based buffer overflow in Vim - CVE-2024-45306

Vulnerability identifier: #VU96656

CSH Severity: Low

CVSS v4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-45306

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary error. A remote attacker can trick the victim to open a specially crafted file, trigger a heap-based buffer overflow and crash the application.

Vim
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
visionOS
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
watchOS
macOS
Desktop Applications Module
Basesystem Module
openSUSE Leap
tvOS
Apple iOS
iPadOS
Fedora
SmartFabric Manager
APEX Cloud Platform for Microsoft Azure
APEX Cloud Platform for Red Hat OpenShift
vim
vim-debuginfo
gvim-debuginfo
vim-debugsource
gvim
vim-data-common
vim-data
xxd
vim-small
vim-small-debuginfo

Install updates from vendor's website.

Vim - update to 9.1.0707
visionOS - update to 2.2
watchOS - update to 11.2
macOS - addressed in versions 13.7.2 22H308, 14.7.2 23H304, 15.2 24C101
tvOS - update to 18.2
Apple iOS - update to 18.2 22C152
iPadOS - update to 18.2 22C152
SmartFabric Manager - update to 1.3.0
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
vim - addressed in versions 9.1.719-1.fc39, 9.1.719-1.fc40, 9.1.719-1.fc41
vim - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150500.20.21.1
vim-debuginfo - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
gvim-debuginfo - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150500.20.21.1
vim-debugsource - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
gvim - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150500.20.21.1
vim-data-common - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
vim-data - addressed in versions 9.1.1101-17.41.1, 9.1.1101-150500.20.21.1
xxd - update to 9.1.1101-150000.5.69.1
vim-small - addressed in versions 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1
vim-small-debuginfo - addressed in versions 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1

• https://github.com/vim/vim/security/advisories/GHSA-wxf9-c5gx-qrwr

• Denial of service in Vim
• Fedora 41 update for vim
• Fedora 40 update for vim
• Fedora 39 update for vim
• SUSE update for vim
• SUSE update for vim
• SUSE update for vim
• Multiple vulnerabilities in Apple visionOS
• Multiple vulnerabilities in Apple tvOS
• Multiple vulnerabilities in Apple watchOS
• Multiple vulnerabilities in macOS Sequoia
• Multiple vulnerabilities in Apple iOS 18 and iPadOS 18
• Multiple vulnerabilities in Apple macOS Sonoma
• Multiple vulnerabilities in Apple macOS Ventura
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Dell SmartFabric Manager update for third-party components