PT-2023-4441 · Vim+6 · Vim+6

Brammool · Published 2023-01-29 · Updated 2025-03-30 · CVE-2023-1175

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.1378

Description The issue is related to an incorrect calculation of buffer size in the vim text editor, specifically in the yank copy line function of the register.c component. This can allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 9.0.1378, update to version 9.0.1378 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Exploit

Fix

Weakness Enumeration

CWE-131

Related Identifiers

ALT-PU-2023-1955

ALT-PU-2023-2008

ALT-PU-2023-2024

ALT-PU-2023-2089

AZL-25355

BDU:2023-04830

CVE-2023-1175

DLA-3453-1

DLA-4097-1

MGASA-2023-0110

OESA-2023-1168

OPENSUSE-SU-2024:12774-1

ROSA-SA-2023-2268

SUSE-SU-2023:0760-1

SUSE-SU-2023:0781-1

SUSE-SU-2023:0781-2

USN-5963-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Suse

Ubuntu

Vim

References · 64

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1175.json · Exploit
• 🔥 https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e · Exploit
• https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1175 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1264 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0288 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4097-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5963-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1175 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0760-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5963-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0054 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-1175 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-1175 · Vendor Advisory