Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
A vulnerability (CVE-2026-73070) was found in Vim within Red Hat Hardened Images RPMs where the socket server backend accepts an unbounded number of client connections. This can cause file descriptor overflow leading to stack memory corruption or termination of the Vim server, resulting in a denial of service (DoS). The issue is classified as a buffer overflow (CWE-120). Red Hat has issued an update including fixed RPM packages to address this flaw.
AI Analysis
Technical Summary
CVE-2026-73070 describes a buffer overflow vulnerability in Vim's socket server backend used in Red Hat Hardened Images RPMs. The socket server accepts an unlimited number of client connections, which can overflow internal data structures related to file descriptors. A local process able to connect to this socket can exploit the flaw to corrupt stack memory or cause the Vim server to terminate unexpectedly, resulting in a denial of service. The vulnerability is categorized under CWE-120 (Buffer Copy without Checking Size of Input). Red Hat has released updated RPM packages (vim 9.2.967-1.hum1 and related components) to fix this issue.
Potential Impact
The vulnerability allows a local attacker to cause a denial of service by crashing or terminating the Vim server due to stack memory corruption from unbounded socket connections. There is no indication of confidentiality or integrity impact, but availability is affected. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has released updated RPM packages for Vim and related components as part of the Red Hat Hardened Images update to fix this vulnerability. Users should apply these official updates to remediate the issue. No additional mitigations or workarounds are specified in the vendor advisory.
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Description
A vulnerability (CVE-2026-73070) was found in Vim within Red Hat Hardened Images RPMs where the socket server backend accepts an unbounded number of client connections. This can cause file descriptor overflow leading to stack memory corruption or termination of the Vim server, resulting in a denial of service (DoS). The issue is classified as a buffer overflow (CWE-120). Red Hat has issued an update including fixed RPM packages to address this flaw.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-73070 describes a buffer overflow vulnerability in Vim's socket server backend used in Red Hat Hardened Images RPMs. The socket server accepts an unlimited number of client connections, which can overflow internal data structures related to file descriptors. A local process able to connect to this socket can exploit the flaw to corrupt stack memory or cause the Vim server to terminate unexpectedly, resulting in a denial of service. The vulnerability is categorized under CWE-120 (Buffer Copy without Checking Size of Input). Red Hat has released updated RPM packages (vim 9.2.967-1.hum1 and related components) to fix this issue.
Potential Impact
The vulnerability allows a local attacker to cause a denial of service by crashing or terminating the Vim server due to stack memory corruption from unbounded socket connections. There is no indication of confidentiality or integrity impact, but availability is affected. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has released updated RPM packages for Vim and related components as part of the Red Hat Hardened Images update to fix this vulnerability. Users should apply these official updates to remediate the issue. No additional mitigations or workarounds are specified in the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:56636
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a8af9a1acd9273b49f32e8b
Added to database: 08/23/2026, 13:46:09 UTC
Last enriched: 08/23/2026, 13:48:11 UTC
Last updated: 08/23/2026, 22:52:13 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.