PT-2023-8851 · Vim+6 · Vim+6

Published 2023-10-05 · Updated 2024-03-29 · CVE-2023-5441

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions vim versions prior to 20d161ace307e28690229b68584f2d84556f8960

Description The issue is related to a NULL pointer dereference in the exmode of the vim text editor. Exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations For versions prior to 20d161ace307e28690229b68584f2d84556f8960, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2023-6278

ALT-PU-2023-6411

ALT-PU-2023-6414

ALT-PU-2023-7253

AZL-31112

BDU:2024-02410

CVE-2023-5441

ECHO-5505-9702-2DC8

MGASA-2023-0305

OESA-2023-1749

OPENSUSE-SU-2023_4557-1

OPENSUSE-SU-2023_4587-1

SUSE-SU-2023:4557-1

SUSE-SU-2023:4560-1

SUSE-SU-2023:4587-1

USN-6452-1

Affected Products

Alt Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Vim

References · 71

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5441.json · Exploit
• 🔥 https://huntr.dev/bounties/b54cbdf5-3e85-458d-bb38-9ea2c0b669f2 · Exploit
• https://github.com/vim/vim/commit/20d161ace307e28690229b68584f2d84556f8960 · Patch
• https://osv.dev/vulnerability/MGASA-2023-0305 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4752 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4557-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6452-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4735 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4734 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-5441 · Security Note
• https://bdu.fstec.ru/vul/2024-02410 · Security Note
• https://ubuntu.com/security/CVE-2023-4733 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5441 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:4560-1 · Vendor Advisory