CVE-2017-5953

NameCVE-2017-5953
Descriptionvim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-822-1, DSA-3786-1
Debian Bugs854969

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
neovim (PTS)buster0.3.4-3fixed
bullseye0.4.4-1fixed
bookworm0.7.2-7fixed
trixie0.7.2-8fixed
sid0.9.5-7fixed
vim (PTS)buster2:8.1.0875-5+deb10u2fixed
buster (security)2:8.1.0875-5+deb10u6fixed
bullseye2:8.2.2434-3+deb11u1fixed
bookworm2:9.0.1378-2fixed
trixie2:9.1.0016-1fixed
sid2:9.1.0199-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
neovimsource(unstable)0.1.7-4
vimsourcewheezy2:7.3.547-7+deb7u2DLA-822-1
vimsourcejessie2:7.4.488-7+deb8u2DSA-3786-1
vimsource(unstable)2:8.0.0197-2854969

Notes

Fixed by https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d

Search for package or bug name: Reporting problems