vim up to 9.1.0646 src/alloc.c double free

Summaryinfo

A vulnerability was found in vim up to 9.1.0646. It has been declared as problematic. Affected is an unknown function of the file src/alloc.c. The manipulation results in double free. This vulnerability is identified as CVE-2024-41957. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in vim up to 9.1.0646. It has been classified as problematic. Affected is some unknown processing of the file src/alloc.c. The manipulation with an unknown input leads to a double free vulnerability. CWE is classifying the issue as CWE-415. The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647

The advisory is available at github.com. This vulnerability is traded as CVE-2024-41957 since 07/24/2024. The exploitability is told to be difficult. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 208882 (CBL Mariner 2.0 Security Update: vim (CVE-2024-41957)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 9.1.0647 eliminates this vulnerability. Applying the patch 8a0bbe7b8aad6f8da28dee218c01bc8a0185a is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at Tenable (208882). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Word Processing Software

Name

• vim

Version

• 9.1.0646

License

• open-source

Website

• Product: https://github.com/vim/vim/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion