CVE catalog

CVE-2024-43790

vim: CVE-2024-43790

Severity: Medium · CVSS 4.5CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Published: Aug 22, 2024, 9:23:07 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.31% · Oct 27, 2026

Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S), the search pattern is displayed at the bottom of the screen in a buffer (msgbuf). When right-left mode (:set rl) is enabled, the search pattern is reversed. This happens by allocating a new buffer. If the search pattern contains some ASCII NUL characters, the buffer allocated will be smaller than the original allocated buffer (because for allocating the reversed buffer, the strlen() function is called, which only counts until it notices an ASCII NUL byte ) and thus the original length indicator is wrong. This causes an overflow when accessing characters inside the msgbuf by the previously (now wrong) length of the msgbuf. The issue has been fixed as of Vim patch v9.1.0689.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	vim	sid	`2:9.2.0858-1`	fixed
Debian	vim	forky	`2:9.2.0858-1`	fixed
Debian	vim	trixie	`2:9.1.1230-2`	fixed
Debian	vim	bookworm	`2:9.0.1378-2+deb12u2`	vulnerable
Alpine	vim	3.20	`9.1.0707-r0`	fixed
Alpine	vim	3.21	`9.1.0707-r0`	fixed
Alpine	vim	3.22	`9.1.0707-r0`	fixed
Alpine	vim	3.23	`9.1.0707-r0`	fixed
Suse	vim	linux enterprise server ltss extended security 12 sp5	`9.1.1101-17.41.1`	fixed
Suse	vim	linux enterprise micro 5.3	`9.1.1101-150000.5.69.1`	fixed
Suse	vim	linux enterprise micro 5.4	`9.1.1101-150000.5.69.1`	fixed
Suse	vim	linux enterprise micro 5.1	`9.1.1101-150000.5.69.1`	fixed
Suse	vim	linux enterprise micro 5.2	`9.1.1101-150000.5.69.1`	fixed
Suse	vim	linux enterprise micro 5.5	`9.1.1101-150500.20.21.1`	fixed
Suse	vim	linux enterprise module for basesystem 15 sp6	`9.1.1101-150500.20.21.1`	fixed
Suse	vim	linux enterprise module for desktop applications 15 sp6	`9.1.1101-150500.20.21.1`	fixed
Opensuse	vim	leap 15.6	`9.1.1101-150500.20.21.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	vim	source	sid	`2:9.1.0698-1`	unimportant	Not reported	Not reported
Debian	vim	source	forky	`2:9.1.0698-1`	unimportant	Not reported	Not reported
Debian	vim	source	trixie	`2:9.1.0698-1`	unimportant	Not reported	Not reported
Debian	vim	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Alpine	vim	apk	3.20	`9.1.0707-r0`	Not reported	ALPINE-CVE-2024-43790	Not reported
Alpine	vim	apk	3.21	`9.1.0707-r0`	Not reported	ALPINE-CVE-2024-43790	Not reported
Alpine	vim	apk	3.22	`9.1.0707-r0`	Not reported	ALPINE-CVE-2024-43790	Not reported
Alpine	vim	apk	3.23	`9.1.0707-r0`	Not reported	ALPINE-CVE-2024-43790	Not reported
Suse	vim	rpm	linux enterprise server ltss extended security 12 sp5	`9.1.1101-17.41.1`	Not reported	SUSE-SU-2025:0722-1	Not reported
Suse	vim	rpm	linux enterprise micro 5.3	`9.1.1101-150000.5.69.1`	Not reported	SUSE-SU-2025:0724-1	Not reported
Suse	vim	rpm	linux enterprise micro 5.4	`9.1.1101-150000.5.69.1`	Not reported	SUSE-SU-2025:0724-1	Not reported
Suse	vim	rpm	linux enterprise micro 5.1	`9.1.1101-150000.5.69.1`	Not reported	SUSE-SU-2025:0724-1	Not reported
Suse	vim	rpm	linux enterprise micro 5.2	`9.1.1101-150000.5.69.1`	Not reported	SUSE-SU-2025:0724-1	Not reported
Suse	vim	rpm	linux enterprise micro 5.5	`9.1.1101-150500.20.21.1`	Not reported	SUSE-SU-2025:0723-1	Not reported
Suse	vim	rpm	linux enterprise module for basesystem 15 sp6	`9.1.1101-150500.20.21.1`	Not reported	SUSE-SU-2025:0723-1	Not reported
Suse	vim	rpm	linux enterprise module for desktop applications 15 sp6	`9.1.1101-150500.20.21.1`	Not reported	SUSE-SU-2025:0723-1	Not reported
Opensuse	vim	rpm	leap 15.6	`9.1.1101-150500.20.21.1`	Not reported	SUSE-SU-2025:0723-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[vim]Affected
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-athena]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-common]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-doc]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-gtk3]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-gui-common]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-motif]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-nox]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-runtime]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[vim-tiny]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
[xxd]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  dsa · vim · debian · bookworm; dsa · vim · debian · 12

[Debian 13 (Trixie)]

[vim]Fixed
Details (2)
- 2:9.1.1230-2 · amd64 · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · arm64 · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
[vim-athena]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
[vim-common]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
[vim-doc]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
[vim-gtk3]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · amd64 · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · arm64 · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
[vim-gui-common]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
[vim-motif]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · amd64 · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · arm64 · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
[vim-nox]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · amd64 · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · arm64 · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
[vim-runtime]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.0698-1
  dsa · vim · debian · 13

Next results

Observed: Oct 27, 2026, 2:19:46 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]