CVE-2023-0433

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-0433
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://seclists.org/fulldisclosure/2023/Mar/17
http://seclists.org/fulldisclosure/2023/Mar/18
http://seclists.org/fulldisclosure/2023/Mar/21
https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b Patch Third Party Advisory
https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e Exploit Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/
https://support.apple.com/kb/HT213670
https://support.apple.com/kb/HT213675
https://support.apple.com/kb/HT213677
Configurations

Configuration 1 (hide)

cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
History

07 Nov 2023, 04:00

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/', 'name': 'FEDORA-2023-93fb5b08eb', 'tags': [], 'refsource': 'FEDORA'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/', 'name': 'FEDORA-2023-2db4df65c3', 'tags': [], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/ -

28 Mar 2023, 05:15

Type Values Removed Values Added
References
  • (FULLDISC) http://seclists.org/fulldisclosure/2023/Mar/17 -
  • (FULLDISC) http://seclists.org/fulldisclosure/2023/Mar/21 -
  • (FULLDISC) http://seclists.org/fulldisclosure/2023/Mar/18 -

28 Mar 2023, 02:15

Type Values Removed Values Added
References
  • (CONFIRM) https://support.apple.com/kb/HT213670 -
  • (CONFIRM) https://support.apple.com/kb/HT213677 -
  • (CONFIRM) https://support.apple.com/kb/HT213675 -

18 Feb 2023, 03:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/ -

13 Feb 2023, 04:53

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/ -

30 Jan 2023, 17:26

Type Values Removed Values Added
First Time Vim
Vim vim
References (CONFIRM) https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e - (CONFIRM) https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e - Exploit, Third Party Advisory
References (MISC) https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b - (MISC) https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b - Patch, Third Party Advisory
CPE cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

21 Jan 2023, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-01-21 15:15

Updated : 2023-12-10 14:48

NVD link : CVE-2023-0433

Mitre link : CVE-2023-0433

CVE.ORG link : CVE-2023-0433

JSON object : View

Products Affected

vim

  • vim
CWE
CWE-122

Heap-based Buffer Overflow