Wind River Support Network

HomeDefectsLIN1019-10907
Fixed

LIN1019-10907 : Security Advisory - vim - CVE-2024-22667

Created: Feb 5, 2024    Updated: Mar 11, 2024
Resolved Date: Mar 10, 2024
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.

CREATE(Triage):(User=admin) CVE-2024-22667 (https://nvd.nist.gov/vuln/detail/CVE-2024-22667)

CVEs


Live chat
Online