PT-2023-6503 · Vim+6 · Vim+6
Cole Dilorenzo
·
Published
2023-10-27
·
Updated
2024-06-27
·
CVE-2023-46246
CVSS v3.1
4.0
Medium
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
Vim versions prior to 9.0.2068
Description
The issue is caused by a heap-use-after-free in memory allocated in the function
ga grow inner and an integer overflow when using the :history command. This can potentially lead to a denial of service. The vulnerability is related to the ga grow inner function in the file src/alloc.c and the do cmdline function in the file src/ex docmd.c. The :history command can cause an integer overflow, potentially leading to a use-after-free.Recommendations
For versions prior to 9.0.2068, update to version 9.0.2068 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the
:history command until a patch is available. Restrict access to the vulnerable function ga grow inner to minimize the risk of exploitation.Exploit
Fix
Integer Overflow
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Red Os
Suse
Ubuntu
Vim