CVE-2024-45306
published 2024-09-02CVE-2024-45306: Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the…
PriorityP421medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.30%
22.0th percentile
Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of
a line. Back then we assumed this loop is unnecessary. However, this change made it possible that the cursor position stays invalid and points beyond the end of a line, which would eventually cause a heap-buffer-overflow when trying to access the line pointer at
the specified cursor position. It's not quite clear yet, what can lead to this situation that the cursor points to an invalid position. That's why patch v9.1.0707 does not include a test case. The only observed impact has been a program crash. This issue has been addressed in with the patch v9.1.0707. All users are advised to upgrade.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios18.2_and_ipados18.2 | — | — |
| apple | macos_sequoia | — | — |
| apple | macossonoma14.7.2 | — | — |
| apple | macosventura13.7.2 | — | — |
| apple | tvos18.2 | — | — |
| apple | visionos2.2 | — | — |
| apple | watchos11.2 | — | — |
| debian | vim | < vim 2:9.1.0709-1 (forky) | vim 2:9.1.0709-1 (forky) |
| vim | vim | — | — |
| vim | vim | >= 0 < 2:9.1.0709-1 | 2:9.1.0709-1 |
| vim | vim | >= 0 < 2:9.1.0709-1 | 2:9.1.0709-1 |
| vim | vim | >= 9.1.0038 < 9.1.0707 | 9.1.0707 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian4.5LOW
vendor_redhat4.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2024-45306: visionOS2.2
vendor_apple·2024-12-11·CVSS 4.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: visionOS2.2
Apple Security Update: About the security content of visionOS2.2
Product: visionOS2.2
CVE: CVE-2024-45306
Component: CVE-2024-45306
Apple
CVE-2024-45306: tvOS18.2
vendor_apple·2024-12-11·CVSS 4.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: tvOS18.2
Apple Security Update: About the security content of tvOS18.2
Product: tvOS18.2
CVE: CVE-2024-45306
Component: CVE-2024-45306
Apple
CVE-2024-45306: iOS18.2 and iPadOS18.2
vendor_apple·2024-12-11·CVSS 4.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: iOS18.2 and iPadOS18.2
Apple Security Update: About the security content of iOS18.2 and iPadOS18.2
Product: iOS18.2 and iPadOS18.2
CVE: CVE-2024-45306
Component: CVE-2024-45306
Apple
CVE-2024-45306: watchOS11.2
vendor_apple·2024-12-11·CVSS 4.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: watchOS11.2
Apple Security Update: About the security content of watchOS11.2
Product: watchOS11.2
CVE: CVE-2024-45306
Component: CVE-2024-45306
Apple
CVE-2024-45306: macOS Sequoia 15.2
vendor_apple·2024-12-11·CVSS 4.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: macOS Sequoia 15.2
Apple Security Update: About the security content of macOS Sequoia 15.2
Product: macOS Sequoia
Version: 15.2
CVE: CVE-2024-45306
Component: CVE-2024-45306
Apple
CVE-2024-45306: macOSSonoma14.7.2
vendor_apple·2024-12-11·CVSS 4.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: macOSSonoma14.7.2
Apple Security Update: About the security content of macOSSonoma14.7.2
Product: macOSSonoma14.7.2
CVE: CVE-2024-45306
Component: CVE-2024-45306
Apple
CVE-2024-45306: macOSVentura13.7.2
vendor_apple·2024-12-11·CVSS 4.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: macOSVentura13.7.2
Apple Security Update: About the security content of macOSVentura13.7.2
Product: macOSVentura13.7.2
CVE: CVE-2024-45306
Component: CVE-2024-45306
Red Hat
vim: heap-buffer-overflow in Vim
vendor_redhat·2024-09-02·CVSS 4.5
CVE-2024-45306 [MEDIUM] CWE-122 vim: heap-buffer-overflow in Vim
vim: heap-buffer-overflow in Vim
Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of
a line. Back then we assumed this loop is unnecessary. However, this change made it possible that the cursor position stays invalid and points beyond the end of a line, which would eventually cause a heap-buffer-overflow when trying to access the line pointer at
the specified cursor position. It's not quite clear yet, what can lead to this situation that the cursor points to an invalid position. That's why patch v9.1.0707 does not include a test case. The only observed impact has been a program crash. T
Debian
CVE-2024-45306: vim - Vim is an open source, command line text editor. Patch v9.1.0038 optimized how t...
vendor_debian·2024·CVSS 4.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: vim - Vim is an open source, command line text editor. Patch v9.1.0038 optimized how t...
Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop is unnecessary. However, this change made it possible that the cursor position stays invalid and points beyond the end of a line, which would eventually cause a heap-buffer-overflow when trying to access the line pointer at the specified cursor position. It's not quite clear yet, what can lead to this situation that the cursor points to an invalid position. That's why patch v9.1.0707 does not include a test case. The only observed impact has been a program crash. This issue has been addressed in wi
OSV
CVE-2024-45306: Vim is an open source, command line text editor
osv·2024-09-02·CVSS 5.5
CVE-2024-45306 [MEDIUM] CVE-2024-45306: Vim is an open source, command line text editor
Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop is unnecessary. However, this change made it possible that the cursor position stays invalid and points beyond the end of a line, which would eventually cause a heap-buffer-overflow when trying to access the line pointer at the specified cursor position. It's not quite clear yet, what can lead to this situation that the cursor points to an invalid position. That's why patch v9.1.0707 does not include a test case. The only observed impact has been a program crash. This issue has been addressed in wi
No detection rules found.
No public exploits indexed.
2024-09-02
Published