Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-0433

Опубликовано: 21 янв. 2023
Источник: redhat
CVSS3: 7.8

Описание

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

Отчет

Red Hat Product Security has rated this issue as having a Low security impact, because the "victim" has to run an untrusted file IN SCRIPT MODE. Someone who is running untrusted files in script mode is equivalent to someone just taking a random python script and running it. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle & Updates Policy: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6vimOut of support scope
Red Hat Enterprise Linux 7vimFix deferred
Red Hat Enterprise Linux 8vimFix deferred
Red Hat Enterprise Linux 9vimFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=2163612vim: reading past the end of a line when formatting text

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 2 лет назад

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

CVSS3: 7.8
nvd
больше 2 лет назад

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

CVSS3: 7.8
msrc
больше 2 лет назад

Описание отсутствует

CVSS3: 7.8
debian
больше 2 лет назад

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...

CVSS3: 7.8
github
больше 2 лет назад

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

7.8 High

CVSS3