Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-48231

Опубликовано: 16 нояб. 2023
Источник: nvd
CVSS3: 3.9
CVSS3: 4.3
EPSS Низкий

Описание

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
Версия до 9.0.2106 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 17%
0.00053
Низкий

3.9 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.9
ubuntu
больше 1 года назад

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 4.3
redhat
больше 1 года назад

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 3.9
debian
больше 1 года назад

Vim is an open source command line text editor. When closing a window, ...

CVSS3: 4.3
fstec
больше 1 года назад

Уязвимость функции win_close() текстового редактора vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность данных

CVSS3: 4.3
redos
около 1 года назад

Множественные уязвимости VIM

EPSS

Процентиль: 17%
0.00053
Низкий

3.9 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-416