CVE-2023-48236

MOYENNE 4.3CVE-2023-48236 · Published 16/11/2023 · updated 23/06/2026

En bref

CVE-2023-48236 est une vulnérabilité MOYENNE (CVSS 4.3) touchant vim (vim).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.69%, plus élevée que 52.9% des vulnérabilités.
Correctif : mettre à jour vers 9.0.2111 ou plus récent.

Package	Affected versions	Patched versions
vim vim	`< 9.0.2111`	`9.0.2111`

Description

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit `73b2d379` which has been included in release version 9.0.2111. Users are advised to upgrade. There are no known workarounds for this vulnerability.

References

openwall.com/lists/oss-security/2023/11/16/1 · Mailing List
vim/vim commit 73b2d37 · Patch
vim/vim security advisory · Vendor Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6 · Mailing List
security.netapp.com/advisory/ntap-20231227-0002 · Third Party Advisory

Autres vulnérabilités de vim

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

vim

< 9.0.2111

9.0.2111

Description

Autres vulnérabilités de vim

Tout voir →