PT-2023-5107 · Vim+8 · Vim+8
Publicado
2023-09-02
·
Atualizado
2025-03-30
·
CVE-2023-4738
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
vim versions prior to 9.0.1848
Description
The issue is a heap-based buffer overflow in the vim text editor, specifically in the
vim regsub both function, caused by a dynamic memory buffer overflow. This can allow an attacker to execute arbitrary code.Recommendations
For versions prior to 9.0.1848, update to version 9.0.1848 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
vim regsub both function until a patch is available.Exploit
Correção
Heap Based Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Debian
Linuxmint
Apple Macos
Red Os
Suse
Ubuntu
Vim