PT-2023-1300 · Vim+6 · Vim+6

Brammool · Published 2023-01-26 · Updated 2023-10-22 · CVE-2023-0512

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.1247

Description The issue is related to a Divide By Zero error in the vim text editor, specifically associated with the smoothscroll function when the window size is small. This could potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For versions prior to 9.0.1247, update to version 9.0.1247 or later to resolve the issue. As a temporary workaround, consider disabling the smoothscroll function until a patch is available.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

ALT-PU-2023-1192

ALT-PU-2023-1253

ALT-PU-2023-1259

AZL-13233

BDU:2023-00578

CVE-2023-0512

ROSA-SA-2023-2268

SUSE-SU-2023:0760-1

SUSE-SU-2023:0781-1

SUSE-SU-2023:0781-2

SUSE-SU-2023_0760-1

SUSE-SU-2023_0781-1

Affected Products

Alt Linux

Astra Linux

Debian

Apple Macos

Red Os

Suse

Vim

References · 52

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0512.json · Exploit
• 🔥 https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74 · Exploit
• https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835 · Patch
• https://goslinux.fssp.gov.ru/2726972 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0760-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0727SE47 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-0512 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-0512 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0512 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0781-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00578 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2023-0512 · Vendor Advisory