Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-48234

Опубликовано: 16 нояб. 2023
Источник: nvd
CVSS3: 2.8
CVSS3: 4.3
EPSS Низкий

Описание

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has been included in release version 9.0.2109. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
Версия до 9.0.2109 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 11%
0.00039
Низкий

2.8 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 2.8
ubuntu
больше 1 года назад

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `58f9befca1` which has been included in release version 9.0.2109. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 4.3
redhat
больше 1 года назад

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `58f9befca1` which has been included in release version 9.0.2109. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 2.8
debian
больше 1 года назад

Vim is an open source command line text editor. When getting the count ...

CVSS3: 4.3
fstec
больше 1 года назад

Уязвимость функции nv_z_get_count() текстового редактора vim, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.3
redos
около 1 года назад

Множественные уязвимости VIM

EPSS

Процентиль: 11%
0.00039
Низкий

2.8 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-190