This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-20786 →
DEBIAN-CVE-2018-20786
libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application...
Original description
The description as published by the source.
libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
libvterm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
libvterm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
libvterm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:12
vim
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0693-1"}]}]
Debian:13
vim
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0693-1"}]}]
Debian:14
vim
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0693-1"}]}]
References
- advisory security-tracker.debian.org