CVE-2023-0433

Опубликовано: 21 янв. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

Ссылки

http://seclists.org/fulldisclosure/2023/Mar/17
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Mar/18
Mitigation
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Mar/21
Mailing List
Third Party Advisory
https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b
Patch
Third Party Advisory
https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e
Exploit
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/
Mailing List
Third Party Advisory
https://support.apple.com/kb/HT213670
Third Party Advisory
https://support.apple.com/kb/HT213675
Third Party Advisory
https://support.apple.com/kb/HT213677
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Mar/17
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Mar/18
Mitigation
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Mar/21
Mailing List
Third Party Advisory
https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b
Patch
Third Party Advisory
https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e
Exploit
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/
Mailing List
Third Party Advisory
https://support.apple.com/kb/HT213670
Third Party Advisory
https://support.apple.com/kb/HT213675
Third Party Advisory
https://support.apple.com/kb/HT213677
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 11.7.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 12.0.0 (включая) до 12.6.4 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 13.0 (включая) до 13.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:neovim:neovim:*:*:*:*:*:*:*:*

Версия от 0.1.0 (включая) до 0.8.3 (исключая)

Конфигурация 4

cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*

Версия до 9.0.1225 (исключая)

EPSS

Процентиль: 45%

0.00531

Низкий

7.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVE-2023-0433

CVSS3: 7.8

ubuntu

почти 4 года назад

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

CVE-2023-0433

CVSS3: 7.8

redhat

почти 4 года назад

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

CVE-2023-0433

CVSS3: 7.8

msrc

почти 4 года назад

Heap-based Buffer Overflow in vim/vim

CVE-2023-0433

CVSS3: 7.8

debian

почти 4 года назад

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...

GHSA-hv9j-pr23-x4hf

CVSS3: 7.8

github

почти 4 года назад

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

EPSS

Процентиль: 45%

0.00531

Низкий

7.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-122