What’s Vulnerable › Vulnerabilities

CVE-2017-11109

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-08 · updated 2026-06-17
• Weakness: CWE-416

Description

Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there might be a limited number of scenarios in which this has security relevance.

Affected products

• vim/vim: 8.0

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1468492
• https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html
• https://usn.ubuntu.com/4309-1/
• https://bugzilla.redhat.com/show_bug.cgi?id=1468492
• https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html
• https://usn.ubuntu.com/4309-1/

Get alerted when CVE-2017-11109 or the next vulnerability affects your stack