PT-2023-8854 · Vim+6 · Vim+6

Fabian Toepfer · Published 2023-11-16 · Updated 2026-03-29 · CVE-2023-48232

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2107

Description A floating point exception may occur in Vim when calculating the line offset for overlong lines and smooth scrolling is enabled, along with the 'cpo' settings including the n flag. This issue is related to improper handling of exceptional conditions in the adjust plines for skipcol() function. The exception should only result in a crash and is expected to affect users with non-default settings. There are no known workarounds for this issue.

Recommendations For versions prior to 9.0.2107, users are advised to upgrade to release version 9.0.2107 or later to address the issue. As a temporary workaround, consider disabling smooth scrolling or modifying the 'cpo' settings to exclude the n flag until a patch is applied. However, the most effective resolution is to upgrade to the specified release version.

Exploit

Fix

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

ALT-PU-2023-7676

ALT-PU-2023-7776

ALT-PU-2023-7778

ALT-PU-2024-1095

AZL-32009

BDU:2024-02413

CVE-2023-48232

ECHO-6C14-3D08-3F3A

GHSA-F6CX-X634-HQPW

MGASA-2023-0341

OPENSUSE-SU-2024_1287-1

SUSE-SU-2024:0783-1

SUSE-SU-2024:0871-1

SUSE-SU-2024:1287-1

USN-6557-1

Affected Products

Alt Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Vim

References · 72

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48232.json · Exploit
• https://github.com/vim/vim/commit/cb0b99f0672d8446585d26e998343dceca17d1ce · Patch
• https://github.com/vim/vim/security/advisories/GHSA-f6cx-x634-hqpw · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-48232 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1725 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-48232 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-48232 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0341.html · Security Note
• https://ubuntu.com/security/CVE-2022-2000 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0783-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-ALPINE-318-CVE-2023-48232 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-48706 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6557-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1897 · Vendor Advisory