Debian/neovim: critical 9.8
vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overf
Action: Upgrade neovim to 0.1.7-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.7-4 | - |
Fixed versions
| 0.1.7-4 |
Sources
- osv: DEBIAN-CVE-2017-5953#Debian:14/neovim
- https://security-tracker.debian.org/tracker/CVE-2017-5953
published · modified · JSON