CyberRota Analysis
AI-GeneratedThe socket server backend in Vim prior to version 9.2.0842 is vulnerable to an unbounded client connection issue, which can lead to descriptor overflow in fd_set structures and fixed-size struct pollfd arrays. This vulnerability allows a local process to potentially corrupt stack memory or crash the Vim server. Users and administrators of affected Vim installations should prioritize upgrading to version 9.2.0842 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), causing descriptors to overflow fd_set structures in src/channel.c and fixed-size struct pollfd arrays in src/os_unix.c, which allows a local process that can connect to the server socket to corrupt stack memory or terminate the Vim server. This issue is fixed in version 9.2.0842.