Skip to main content

Bootstrap Os CVE-2024-43374

MEDIUM
Use After Free (CWE-416)
N/A vendor:alpine
4.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.5 MEDIUM
AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

3
Patch released
Jun 09, 2026 - 18:37 NVD
https://github.com/vim/vim/commit/0a6e57b09bc8c76691b367a5babfb79b31b770e8
CVSS changed
Jun 09, 2026 - 18:37 NVD
4.5 (MEDIUM)
CVE Published
May 27, 2026 - 22:32 nvd
MEDIUM

DescriptionCVE.org

Alpine Linux: vim fixed in 9.1.0678-r0

Analysis

Alpine Linux: vim fixed in 9.1.0678-r0

CVE-2023-4911 HIGH POC
7.8 Oct 03

Local privilege escalation in the GNU C Library (glibc) dynamic loader ld.so allows unprivileged local users on affected

CVE-2024-6387 HIGH POC
8.1 Jul 01

Remote code execution in OpenSSH's sshd server (regression of CVE-2006-5051) allows unauthenticated remote attackers to

CVE-2022-32207 CRITICAL POC
9.8 Jul 07

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the

CVE-2025-0665 HIGH POC
7.0 Feb 05

A double-close vulnerability exists in libcurl when tearing down connection channels after threaded name resolution, cau

CVE-2022-22576 HIGH POC
8.1 May 26

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-au

CVE-2019-17498 HIGH POC
8.1 Oct 21

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds che

CVE-2022-45061 HIGH POC
7.5 Nov 09

An issue was discovered in Python before 3.11.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploita

CVE-2024-2312 MEDIUM POC
6.7 Apr 05

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI syst

CVE-2022-32206 MEDIUM POC
6.5 Jul 07

curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple t

CVE-2022-32208 MEDIUM POC
5.9 Jul 07

When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. Rated medium se

CVE-2024-56337 CRITICAL
9.8 Dec 20

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat.0.0-M1 through 11.0.1, from 10.1.0-M1 t

CVE-2024-50379 CRITICAL
9.8 Dec 17

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE o

Share

CVE-2024-43374 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy