CLEANSTART-2024-II23922

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-II23922.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-II23922
Upstream
Published
2026-10-31T14:18:17Z
Modified
2026-10-31T16:01:18Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8
Details

CVE-2017-6349 affects multiple packages. An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8. See references for individual vulnerability details.

References

Affected packages

CleanStart / neovim

Package

Name
neovim
Purl
pkg:apk/cleanstart/neovim

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.2.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-II23922.json"

CleanStart / vim

Package

Name
vim
Purl
pkg:apk/cleanstart/vim

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.0.1521-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-II23922.json"