CVE catalog

CVE-2024-43374

Vim vulnerabilities

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.35% · Oct 25, 2026

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the argument list that we are actually modifying. Once the autocommands are completed, the references to the window and argument list are no longer valid and as such cause an use-after-free. Impact is low since the user must either intentionally add some unusual autocommands that wipe a buffer during creation (either manually or by sourcing a malicious plugin), but it will crash Vim. The issue has been fixed as of Vim patch v9.1.0678.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianvimsid2:9.2.0858-1fixed
Debianvimforky2:9.2.0858-1fixed
Debianvimtrixie2:9.1.1230-2fixed
Debianvimbookworm2:9.0.1378-2+deb12u2vulnerable
UbuntuvimnobleNot reportedvulnerable
Ubuntuvimnoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-athenanoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-commonnoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-docnoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-gtk3noble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-gui-commonnoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-motifnoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-noxnoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-runtimenoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuvim-tinynoble2:9.1.0016-1ubuntu7.2fixed
Ubuntuxxdnoble2:9.1.0016-1ubuntu7.2fixed
Alpinevim3.209.1.0678-r0fixed
Alpinevim3.219.1.0678-r0fixed
Alpinevim3.229.1.0678-r0fixed
Alpinevim3.239.1.0678-r0fixed
Susevimlinux micro 6.09.1.1101-1.1fixed
Susevimlinux enterprise server 12 sp5-ltss9.1.0836-17.38.1fixed
Susevimlinux enterprise server ltss extended security 12 sp59.1.0836-17.38.1fixed
Ubuntuvimpro2:8.0.0197-4ubuntu5vulnerable
Ubuntuvimpro2:8.0.1144-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu2vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.4vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.6vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.7vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.8vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.9vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.10vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.11vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.12vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm4vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm5vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm6vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm7vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm8vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm9fixed
Ubuntuvim20.042:8.1.0875-5ubuntu2vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu3vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu1vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.3vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.6vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.7vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.8vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.9vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.11vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.12vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.13vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.14vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.15vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.16vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.17vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.18vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.20vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.21vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.22vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.23vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.24fixed
Ubuntuvim22.042:8.2.2434-3ubuntu3vulnerable
Ubuntuvim22.042:8.2.2434-3ubuntu4vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu1vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu2vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu3vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu5vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu1vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.1vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.3vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.4vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.5vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.7vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.8vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.9vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.10vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.11vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.12vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.13vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.15vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.16vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.17vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.18fixed
Ubuntuvim24.042:9.0.1672-1ubuntu2vulnerable
Ubuntuvim24.042:9.0.2087-1ubuntu1vulnerable
Ubuntuvim24.042:9.0.2116-1ubuntu1vulnerable
Ubuntuvim24.042:9.0.2116-1ubuntu2vulnerable
Ubuntuvim24.042:9.0.2184-0ubuntu1vulnerable
Ubuntuvim24.042:9.0.2189-1ubuntu1vulnerable
Ubuntuvim24.042:9.1.0-1ubuntu1vulnerable
Ubuntuvim24.042:9.1.0016-1ubuntu2vulnerable
Ubuntuvim24.042:9.1.0016-1ubuntu6vulnerable
Ubuntuvim24.042:9.1.0016-1ubuntu7vulnerable
Ubuntuvim24.042:9.1.0016-1ubuntu7.1vulnerable
Ubuntuvim24.042:9.1.0016-1ubuntu7.2fixed
Susevimlinux enterprise micro 5.59.1.0836-150500.20.15.1fixed
Susevimlinux enterprise module for basesystem 15 sp59.1.0836-150500.20.15.1fixed
Susevimlinux enterprise module for basesystem 15 sp69.1.0836-150500.20.15.1fixed
Susevimlinux enterprise module for desktop applications 15 sp59.1.0836-150500.20.15.1fixed
Susevimlinux enterprise module for desktop applications 15 sp69.1.0836-150500.20.15.1fixed
Opensusevimleap micro 5.59.1.0836-150500.20.15.1fixed
Opensusevimleap 15.59.1.0836-150500.20.15.1fixed
Opensusevimleap 15.69.1.0836-150500.20.15.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianvimsourcesid2:9.1.0698-1unimportantNot reportedNot reported
Debianvimsourceforky2:9.1.0698-1unimportantNot reportedNot reported
Debianvimsourcetrixie2:9.1.0698-1unimportantNot reportedNot reported
Debianvimsourcebookworm(unfixed)unimportantNot reportedNot reported
Ubuntuvimdebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-athenadebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-commondebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-docdebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-gtk3debnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-gui-commondebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-motifdebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-noxdebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-runtimedebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuvim-tinydebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Ubuntuxxddebnoble2:9.1.0016-1ubuntu7.2Not reportedNot reportedNot reported
Alpinevimapk3.209.1.0678-r0Not reportedALPINE-CVE-2024-43374Not reported
Alpinevimapk3.219.1.0678-r0Not reportedALPINE-CVE-2024-43374Not reported
Alpinevimapk3.229.1.0678-r0Not reportedALPINE-CVE-2024-43374Not reported
Alpinevimapk3.239.1.0678-r0Not reportedALPINE-CVE-2024-43374Not reported
Susevimrpmlinux micro 6.09.1.1101-1.1Not reportedSUSE-SU-2025:20128-1Not reported
Susevimrpmlinux enterprise server 12 sp5-ltss9.1.0836-17.38.1Not reportedSUSE-SU-2024:4409-1Not reported
Susevimrpmlinux enterprise server ltss extended security 12 sp59.1.0836-17.38.1Not reportedSUSE-SU-2024:4409-1Not reported
Ubuntuvimdebpro2:8.0.1453-1ubuntu1.13+esm9Not reportedUBUNTU-CVE-2024-43374Not reported
Ubuntuvimdeb20.042:8.1.2269-1ubuntu5.24Not reportedUBUNTU-CVE-2024-43374Not reported
Ubuntuvimdeb22.042:8.2.3995-1ubuntu2.18Not reportedUBUNTU-CVE-2024-43374Not reported
Ubuntuvimdeb24.042:9.1.0016-1ubuntu7.2Not reportedUBUNTU-CVE-2024-43374Not reported
Susevimrpmlinux enterprise micro 5.59.1.0836-150500.20.15.1Not reportedSUSE-SU-2024:4330-1Not reported
Susevimrpmlinux enterprise module for basesystem 15 sp59.1.0836-150500.20.15.1Not reportedSUSE-SU-2024:4330-1Not reported
Susevimrpmlinux enterprise module for basesystem 15 sp69.1.0836-150500.20.15.1Not reportedSUSE-SU-2024:4330-1Not reported
Susevimrpmlinux enterprise module for desktop applications 15 sp59.1.0836-150500.20.15.1Not reportedSUSE-SU-2024:4330-1Not reported
Susevimrpmlinux enterprise module for desktop applications 15 sp69.1.0836-150500.20.15.1Not reportedSUSE-SU-2024:4330-1Not reported
Opensusevimrpmleap micro 5.59.1.0836-150500.20.15.1Not reportedSUSE-SU-2024:4330-1Not reported
Opensusevimrpmleap 15.59.1.0836-150500.20.15.1Not reportedSUSE-SU-2024:4330-1Not reported
Opensusevimrpmleap 15.69.1.0836-150500.20.15.1Not reportedSUSE-SU-2024:4330-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [vim]Affected
    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-athena]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-common]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-doc]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-gtk3]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-gui-common]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-motif]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-nox]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-runtime]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [vim-tiny]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

  • [xxd]Affected

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Affected

      usn · vim · debian · bookworm; usn · vim · debian · 12

[Debian 13 (Trixie)]

  • [vim]Fixed
    Details (2)

    • 2:9.1.1230-2 · amd64 · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · arm64 · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

  • [vim-athena]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

  • [vim-common]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

  • [vim-doc]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

  • [vim-gtk3]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.1.1230-2 · amd64 · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · arm64 · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

  • [vim-gui-common]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

  • [vim-motif]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.1.1230-2 · amd64 · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · arm64 · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

  • [vim-nox]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.1.1230-2 · amd64 · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · arm64 · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

  • [vim-runtime]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:9.1.0698-1

      usn · vim · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]