PT-2019-4533 · Vim+1 · Vim+1

Dhiraj Mishra + 1 · Publicado 2019-12-29 · Atualizado 2020-10-20 · CVE-2019-20079

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.1.2136

Description The issue is related to the autocmd feature in Vim, specifically in the window.c file, which accesses freed memory. This could potentially allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For versions prior to 8.1.2136, update to version 8.1.2136 or later to resolve the issue.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2020-00573

CVE-2019-20079

MGASA-2020-0151

USN-4309-1

Produtos afetados

Ubuntu

Vim

Referências · 22

• https://github.com/vim/vim/commit/ec66c41d84e574baf8009dbc0bd088d2bc5b2421 · Correção
• https://github.com/vim/vim/compare/v8.1.2135...v8.1.2136 · Correção
• https://usn.ubuntu.com/4309-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-20079 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-20079 · Aviso do Fabricante
• https://packetstormsecurity.com/files/154898 · Nota
• https://osv.dev/vulnerability/MGASA-2020-0151 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-6350 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-20079 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-11109 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=26380 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-20079 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-20079 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4309-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-20079 · Aviso do Fabricante