Skip to content
OpenAdvisories
Medium USN-7048-2 1 CVE

vim vulnerability

Published Oct 16, 2024 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

USN-7048-1 fixed a vulnerability in Vim. This update provides the
corresponding update for Ubuntu 14.04 LTS.

Original advisory details:

Suyue Guo discovered that Vim incorrectly handled memory when flushing the
typeahead buffer, leading to heap-buffer-overflow. An attacker could
possibly use this issue to cause a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS vim 2:7.4.052-1ubuntu3.1+esm19

Vulnerabilities 1

  • Medium 4.5
    CVE-2024-43802

    heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697

    Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may le…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2024-43802