Vulnerability-Lookup

CVE-2017-6350 (GCVE-0-2017-6350)

Vulnerability from cvelistv5 – Published: 2017-02-27 07:25 – Updated: 2024-08-05 15:25

Summary

An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

Severity

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2267 records in the last 180 days details

References

7 references

URL	Tags
https://security.gentoo.org/glsa/201706-26	vendor-advisoryx_refsource_GENTOO
http://www.securitytracker.com/id/1037949	vdb-entryx_refsource_SECTRACK
https://github.com/vim/vim/commit/0c8485f0e493146…	x_refsource_MISC
https://groups.google.com/forum/#%21topic/vim_dev…	x_refsource_MISC
http://www.securityfocus.com/bid/96448	vdb-entryx_refsource_BID
https://groups.google.com/forum/#%21topic/vim_dev…	x_refsource_MISC
https://usn.ubuntu.com/4309-1/	vendor-advisoryx_refsource_UBUNTU

Date Public

2017-02-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:25:49.084Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201706-26",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-26"
          },
          {
            "name": "1037949",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037949"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
          },
          {
            "name": "96448",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96448"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
          },
          {
            "name": "USN-4309-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4309-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-30T19:06:04.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201706-26",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-26"
        },
        {
          "name": "1037949",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037949"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
        },
        {
          "name": "96448",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96448"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
        },
        {
          "name": "USN-4309-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4309-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-6350",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201706-26",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-26"
            },
            {
              "name": "1037949",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037949"
            },
            {
              "name": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75",
              "refsource": "MISC",
              "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q",
              "refsource": "MISC",
              "url": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q"
            },
            {
              "name": "96448",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96448"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y",
              "refsource": "MISC",
              "url": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y"
            },
            {
              "name": "USN-4309-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4309-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-6350",
    "datePublished": "2017-02-27T07:25:00.000Z",
    "dateReserved": "2017-02-26T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:25:49.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2017-6350",
      "date": "2026-10-28",
      "epss": "0.03229",
      "percentile": "0.88205"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "0A066C34-AF73-49F8-B14B-F34813E36107",
                  "versionEndIncluding": "8.0.0377",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
        },
        {
          "lang": "es",
          "value": "Un desbordamiento de entero en un sitio de asignaci\u00f3n de memoria unserialize_uep ocurrir\u00eda para vim en versiones anteriores al parche 8.0.0378, si no valida correctamente los valores de longitud del arb\u00f3l de decisi\u00f3n, al leer un archivo desecho corrompido, lo que puede resultar en un desbordamiento de b\u00fafer."
        }
      ],
      "id": "CVE-2017-6350",
      "lastModified": "2024-11-21T03:29:36.713",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 7.5,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV30": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.0"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2017-02-27T07:59:00.537",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/96448"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securitytracker.com/id/1037949"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Third Party Advisory"
          ],
          "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://security.gentoo.org/glsa/201706-26"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://usn.ubuntu.com/4309-1/"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/96448"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securitytracker.com/id/1037949"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Third Party Advisory"
          ],
          "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://security.gentoo.org/glsa/201706-26"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://usn.ubuntu.com/4309-1/"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-190"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0A066C34-AF73-49F8-B14B-F34813E36107",
                    "versionEndIncluding": "8.0.0377",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
          },
          {
            "lang": "es",
            "value": "Un desbordamiento de entero en un sitio de asignaci\u00f3n de memoria unserialize_uep ocurrir\u00eda para vim en versiones anteriores al parche 8.0.0378, si no valida correctamente los valores de longitud del arb\u00f3l de decisi\u00f3n, al leer un archivo desecho corrompido, lo que puede resultar en un desbordamiento de b\u00fafer."
          }
        ],
        "id": "CVE-2017-6350",
        "lastModified": "2026-05-13T00:24:29.033",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 7.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2017-02-27T07:59:00.537",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/96448"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id/1037949"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://security.gentoo.org/glsa/201706-26"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://usn.ubuntu.com/4309-1/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/96448"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id/1037949"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://security.gentoo.org/glsa/201706-26"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://usn.ubuntu.com/4309-1/"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-190"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-05-13T03:46:00+00:00",
      "cve": "CVE-2017-6350",
      "id": "CVE-2017-6350",
      "initial_release_date": "2017-02-13T00:00:00+00:00",
      "product_status:known_affected": "13",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "vim: Integer overflow at an unserialize_uep memory allocation site",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-6350.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-10-17T02:19:14Z",
      "cve": "CVE-2017-6350",
      "id": "CVE-2017-6350",
      "initial_release_date": "2023-02-15T04:49:06Z",
      "product_status:known_affected": "320",
      "product_status:known_not_affected": "18",
      "product_status:recommended": "471",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2017-6350",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/2023/cve-2017-6350.json",
      "version": "38"
    }
  }
}

BELL-CVE-2017-6350 (CVE-2017-6350)

Vulnerability from osv_bellsoft – Published: 2023-08-31 12:14 – Updated: 2023-08-31 12:14 – Source website

Withdrawn 2023-08-31

Summary

CVE-2017-6350 does not affect BellSoft software

Severity

9.8 (Critical)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

https://docs.bell-sw.com/security/cves/CVE-2017-6350

ADVISORY

JSON

To clipboard

{
  "id": "BELL-CVE-2017-6350",
  "modified": "2023-08-31T12:14:14.686225Z",
  "published": "2023-08-31T12:14:14.686221Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://docs.bell-sw.com/security/cves/CVE-2017-6350"
    }
  ],
  "schema_version": "1.7.4",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "CVE-2017-6350 does not affect BellSoft software",
  "upstream": [
    "CVE-2017-6350"
  ],
  "withdrawn": "2023-08-31T12:14:14.686225Z"
}

CNVD-2017-02555

Vulnerability from cnvd - Published: 2017-03-09

Title

Vim本地整数溢出漏洞

Description

Vim是一款开源的、可配置的用于创建和更改任何类型文本的文本编辑器，它可在大多数UNIX和AppleOSX中使用。 Vim存在本地整数溢出漏洞。由于程序未能充分限制检查用户提供的数据，攻击者可以利用漏洞在受影响的应用程序的上下文中执行任意代码。失败的漏洞尝试可能会导致拒绝服务条件。

Severity

中

Patch Name

Vim本地整数溢出漏洞的补丁

Patch Description

Vim是一款开源的、可配置的用于创建和更改任何类型文本的文本编辑器，它可在大多数UNIX和AppleOSX中使用。 Vim存在本地整数溢出漏洞。由于程序未能充分限制检查用户提供的数据，攻击者可以利用漏洞在受影响的应用程序的上下文中执行任意代码。失败的漏洞尝试可能会导致拒绝服务条件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，详情请关注厂商主页: https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y

Reference

https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y

Impacted products

Name
VIM Vim <=8.0.0377

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "96448"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-6350",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6350"
    }
  },
  "description": "Vim\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u3001\u53ef\u914d\u7f6e\u7684\u7528\u4e8e\u521b\u5efa\u548c\u66f4\u6539\u4efb\u4f55\u7c7b\u578b\u6587\u672c\u7684\u6587\u672c\u7f16\u8f91\u5668\uff0c\u5b83\u53ef\u5728\u5927\u591a\u6570UNIX\u548cAppleOSX\u4e2d\u4f7f\u7528\u3002\r\n\r\nVim\u5b58\u5728\u672c\u5730\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u9650\u5236\u68c0\u67e5\u7528\u6237\u63d0\u4f9b\u7684\u6570\u636e\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u5931\u8d25\u7684\u6f0f\u6d1e\u5c1d\u8bd5\u53ef\u80fd\u4f1a\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u6761\u4ef6\u3002",
  "discovererName": "Vim",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875:\r\nhttps://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-02555",
  "openTime": "2017-03-09",
  "patchDescription": "Vim\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u3001\u53ef\u914d\u7f6e\u7684\u7528\u4e8e\u521b\u5efa\u548c\u66f4\u6539\u4efb\u4f55\u7c7b\u578b\u6587\u672c\u7684\u6587\u672c\u7f16\u8f91\u5668\uff0c\u5b83\u53ef\u5728\u5927\u591a\u6570UNIX\u548cAppleOSX\u4e2d\u4f7f\u7528\u3002\r\n\r\nVim\u5b58\u5728\u672c\u5730\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u9650\u5236\u68c0\u67e5\u7528\u6237\u63d0\u4f9b\u7684\u6570\u636e\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u5931\u8d25\u7684\u6f0f\u6d1e\u5c1d\u8bd5\u53ef\u80fd\u4f1a\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u6761\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Vim\u672c\u5730\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "VIM Vim \u003c=8.0.0377"
  },
  "referenceLink": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y",
  "serverity": "\u4e2d",
  "submitTime": "2017-02-28",
  "title": "Vim\u672c\u5730\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e"
}

FKIE_CVE-2017-6350

Vulnerability from fkie_nvd - Published: 2017-02-27 07:59 - Updated: 2026-06-17 01:22

Severity

9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
cve@mitre.org	http://www.securityfocus.com/bid/96448
cve@mitre.org	http://www.securitytracker.com/id/1037949
cve@mitre.org	https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75	Patch, Third Party Advisory
cve@mitre.org	https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q
cve@mitre.org	https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y
cve@mitre.org	https://security.gentoo.org/glsa/201706-26
cve@mitre.org	https://usn.ubuntu.com/4309-1/
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/96448
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1037949
af854a3a-2127-422b-91ae-364da2661108	https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75	Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q
af854a3a-2127-422b-91ae-364da2661108	https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y
af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/201706-26
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/4309-1/

Impacted products

	Vendor	Product	Version
	vim	vim	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A066C34-AF73-49F8-B14B-F34813E36107",
              "versionEndIncluding": "8.0.0377",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de entero en un sitio de asignaci\u00f3n de memoria unserialize_uep ocurrir\u00eda para vim en versiones anteriores al parche 8.0.0378, si no valida correctamente los valores de longitud del arb\u00f3l de decisi\u00f3n, al leer un archivo desecho corrompido, lo que puede resultar en un desbordamiento de b\u00fafer."
    }
  ],
  "id": "CVE-2017-6350",
  "lastModified": "2026-06-17T01:22:12.307",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-02-27T07:59:00.537",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/96448"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1037949"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://security.gentoo.org/glsa/201706-26"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://usn.ubuntu.com/4309-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/96448"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1037949"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.gentoo.org/glsa/201706-26"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/4309-1/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-H6C7-9RQQ-5R2P

Vulnerability from github – Published: 2022-05-14 03:07 – Updated: 2025-04-20 03:33

Details

Severity

9.8 (Critical)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-6350"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-190"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-02-27T07:59:00Z",
    "severity": "CRITICAL"
  },
  "details": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.",
  "id": "GHSA-h6c7-9rqq-5r2p",
  "modified": "2025-04-20T03:33:26Z",
  "published": "2022-05-14T03:07:24Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6350"
    },
    {
      "type": "WEB",
      "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
    },
    {
      "type": "WEB",
      "url": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q"
    },
    {
      "type": "WEB",
      "url": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y"
    },
    {
      "type": "WEB",
      "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
    },
    {
      "type": "WEB",
      "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201706-26"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4309-1"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/96448"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1037949"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2017-6350

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2017-6350

Aliases

CVE-2017-6350

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-6350",
    "description": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.",
    "id": "GSD-2017-6350",
    "references": [
      "https://www.suse.com/security/cve/CVE-2017-6350.html",
      "https://ubuntu.com/security/CVE-2017-6350",
      "https://advisories.mageia.org/CVE-2017-6350.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2017-6350.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-6350"
      ],
      "details": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.",
      "id": "GSD-2017-6350",
      "modified": "2023-12-13T01:21:09.589444Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2017-6350",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "GLSA-201706-26",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201706-26"
          },
          {
            "name": "1037949",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1037949"
          },
          {
            "name": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75",
            "refsource": "MISC",
            "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
          },
          {
            "name": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q",
            "refsource": "MISC",
            "url": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q"
          },
          {
            "name": "96448",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/96448"
          },
          {
            "name": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y",
            "refsource": "MISC",
            "url": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y"
          },
          {
            "name": "USN-4309-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4309-1/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.0.0377",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-6350"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-190"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
            },
            {
              "name": "96448",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/96448"
            },
            {
              "name": "GLSA-201706-26",
              "refsource": "GENTOO",
              "tags": [],
              "url": "https://security.gentoo.org/glsa/201706-26"
            },
            {
              "name": "1037949",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1037949"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y",
              "refsource": "MISC",
              "tags": [],
              "url": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q",
              "refsource": "MISC",
              "tags": [],
              "url": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q"
            },
            {
              "name": "USN-4309-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "https://usn.ubuntu.com/4309-1/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2018-08-13T21:47Z",
      "publishedDate": "2017-02-27T07:59Z"
    }
  }
}

OPENSUSE-SU-2024:11081-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:10

Summary

neovim-0.5.1-1.1 on GA media

Severity

Moderate

Scope

4 vulnerabilities in this advisory, including CVE-2017-6350.

CVE-2017-6350

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 8 products

Open the full advisory

OPENSUSE-SU-2024:11497-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:19

Summary

gvim-8.2.3408-1.2 on GA media

Severity

Moderate

Scope

7 vulnerabilities in this advisory, including CVE-2017-6350.

CVE-2017-6350

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 20 products

Open the full advisory

SUSE-SU-2017:1712-1

Vulnerability from csaf_suse - Published: 2017-06-28 19:15 - Updated: 2026-09-20 12:28

Summary

Security update for vim

Severity

Moderate

Scope

3 vulnerabilities in this advisory, including CVE-2017-6350.

CVE-2017-6350

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 33 products

Open the full advisory

SUSE-SU-2022:4619-1

Vulnerability from csaf_suse - Published: 2022-12-27 04:16 - Updated: 2026-09-20 14:50

Summary

Security update for vim

Severity

Moderate

Scope

104 vulnerabilities in this advisory, including CVE-2017-6350.

CVE-2017-6350

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 90 products

Open the full advisory

UBUNTU-CVE-2017-6350 (CVE-2017-6350)

Vulnerability from osv_ubuntu – Published: 2017-02-27 07:59 – Updated: 2025-09-08 16:44 – Source website

Details

Severity

9.8 (Critical)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      negligible

References

URL

Type

	https://ubuntu.com/security/CVE-2017-6350	REPORT
	https://groups.google.com/forum/#!topic/vim_dev/L…	REPORT
	https://groups.google.com/forum/#!topic/vim_dev/Q…	REPORT
	https://ubuntu.com/security/notices/USN-4309-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2017-6350	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-lesstif",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:7.4.052-1ubuntu3.1+esm1?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:7.4.052-1ubuntu3.1+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:7.4.000-1ubuntu2",
        "2:7.4.052-1ubuntu1",
        "2:7.4.052-1ubuntu2",
        "2:7.4.052-1ubuntu3",
        "2:7.4.052-1ubuntu3.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-athena-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-gnome-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-gtk-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-gtk3-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-nox-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.1689-3ubuntu1.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:7.4.1689-3ubuntu1.4?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:7.4.1689-3ubuntu1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:7.4.712-2ubuntu4",
        "2:7.4.826-1ubuntu1",
        "2:7.4.826-1ubuntu2",
        "2:7.4.826-1ubuntu3",
        "2:7.4.963-1ubuntu1",
        "2:7.4.963-1ubuntu4",
        "2:7.4.963-1ubuntu5",
        "2:7.4.1689-3ubuntu1",
        "2:7.4.1689-3ubuntu1.1",
        "2:7.4.1689-3ubuntu1.2",
        "2:7.4.1689-3ubuntu1.3"
      ]
    }
  ],
  "aliases": [],
  "details": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.",
  "id": "UBUNTU-CVE-2017-6350",
  "modified": "2025-09-08T16:44:09Z",
  "published": "2017-02-27T07:59:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-6350"
    },
    {
      "type": "REPORT",
      "url": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q"
    },
    {
      "type": "REPORT",
      "url": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4309-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6350"
    }
  ],
  "related": [
    "USN-4309-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "negligible",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2017-6350"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2017-6350 (GCVE-0-2017-6350)

BELL-CVE-2017-6350 (CVE-2017-6350)

UBUNTU-CVE-2017-6350 (CVE-2017-6350)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour