PT-2023-4441 · Vim+6 · Vim+6

Brammool · Publicado 2023-01-29 · Atualizado 2025-03-30 · CVE-2023-1175

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.1378

Description The issue is related to an incorrect calculation of buffer size in the vim text editor, specifically in the yank copy line function of the register.c component. This can allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 9.0.1378, update to version 9.0.1378 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Exploit

Correção

Enumeração de Fraquezas

CWE-131

Identificadores relacionados

ALT-PU-2023-1955

ALT-PU-2023-2008

ALT-PU-2023-2024

ALT-PU-2023-2089

AZL-25355

BDU:2023-04830

CVE-2023-1175

DLA-3453-1

DLA-4097-1

MGASA-2023-0110

OESA-2023-1168

OPENSUSE-SU-2024:12774-1

ROSA-SA-2023-2268

SUSE-SU-2023:0760-1

SUSE-SU-2023:0781-1

SUSE-SU-2023:0781-2

USN-5963-1

Produtos afetados

Alt Linux

Astra Linux

Debian

Linuxmint

Suse

Ubuntu

Vim

Referências · 64

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1175.json · Exploit
• 🔥 https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e · Exploit
• https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1175 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-1264 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-0288 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-4097-1 · Aviso do Fabricante
• https://docs.bell-sw.com/security/cves/CVE-2023-1175 · Nota
• https://osv.dev/vulnerability/USN-5963-1 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-1264 · Nota
• https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html · Nota
• https://t.me/cvenotify/47356 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-1175 · Nota de Segurança
• https://t.me/cvenotify/45518 · Publicação no Telegram