PT-2023-8851 · Vim+6 · Vim+6

Publicado 2023-10-05 · Atualizado 2024-03-29 · CVE-2023-5441

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions vim versions prior to 20d161ace307e28690229b68584f2d84556f8960

Description The issue is related to a NULL pointer dereference in the exmode of the vim text editor. Exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations For versions prior to 20d161ace307e28690229b68584f2d84556f8960, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2023-6278

ALT-PU-2023-6411

ALT-PU-2023-6414

ALT-PU-2023-7253

AZL-31112

BDU:2024-02410

CVE-2023-5441

ECHO-5505-9702-2DC8

MGASA-2023-0305

OESA-2023-1749

OPENSUSE-SU-2023_4557-1

OPENSUSE-SU-2023_4587-1

SUSE-SU-2023:4557-1

SUSE-SU-2023:4560-1

SUSE-SU-2023:4587-1

USN-6452-1

Produtos afetados

Alt Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Vim

Referências · 71

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5441.json · Exploit
• 🔥 https://huntr.dev/bounties/b54cbdf5-3e85-458d-bb38-9ea2c0b669f2 · Exploit
• https://github.com/vim/vim/commit/20d161ace307e28690229b68584f2d84556f8960 · Correção
• https://osv.dev/vulnerability/MGASA-2023-0305 · Aviso do Fabricante
• https://bugzilla.suse.com/1214922 · Nota
• https://ubuntu.com/security/CVE-2023-4752 · Aviso do Fabricante
• https://bugzilla.suse.com/1216167 · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-vim-cve-2023-4733-cve-2023-4750-cve-2023-4752-cve-2023-4781-cve-2023-5344 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2023:4557-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6452-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-4735 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-4734 · Aviso do Fabricante
• https://bugzilla.suse.com/1214924 · Nota
• https://suse.com/security/cve/CVE-2023-4752 · Nota
• https://bugzilla.suse.com/1214925 · Nota