Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-48237

Опубликовано: 16 нояб. 2023
Источник: nvd
CVSS3: 2.8
CVSS3: 4.3
EPSS Низкий

Описание

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 6bf131888 which has been included in version 9.0.2112. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
Версия до 9.0.2112 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.00053
Низкий

2.8 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 2.8
ubuntu
около 2 лет назад

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `6bf131888` which has been included in version 9.0.2112. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 4.3
redhat
около 2 лет назад

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `6bf131888` which has been included in version 9.0.2112. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 4.3
msrc
около 2 лет назад

overflow in shift_line in vim

CVSS3: 2.8
debian
около 2 лет назад

Vim is an open source command line text editor. In affected versions w ...

CVSS3: 4.3
fstec
около 2 лет назад

Уязвимость функции shift_line() текстового редактора vim, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 16%
0.00053
Низкий

2.8 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-190