PT-2023-8855 · Vim+6 · Vim+6

Fabian Toepfer · Published 2023-11-16 · Updated 2026-03-29 · CVE-2023-48233

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2108

Description The issue is related to the use of large values for the :s command, which can exceed the capacity of a signed long variable, potentially leading to a crash. The impact is considered low, and user interaction is required for exploitation. There are no known instances of this issue being exploited in real-world attacks.

Recommendations For versions prior to 9.0.2108, upgrade to release version 9.0.2108 or later to resolve the issue. As a temporary workaround, consider avoiding the use of large values for the :s command until a patch is applied.

Exploit

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2023-7676

ALT-PU-2023-7776

ALT-PU-2023-7778

ALT-PU-2024-1095

AZL-32010

BDU:2024-02414

CVE-2023-48233

ECHO-F5CD-DFC0-A213

GHSA-3XX4-HCQ6-R2VJ

MGASA-2023-0341

OESA-2023-1874

OESA-2023-1876

OESA-2023-1883

OESA-2023-1884

OESA-2023-1885

OPENSUSE-SU-2024_1287-1

SUSE-SU-2024:0783-1

SUSE-SU-2024:0871-1

SUSE-SU-2024:1287-1

USN-6557-1

Affected Products

Alt Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Vim

References · 90

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48233.json · Exploit
• https://github.com/vim/vim/security/advisories/GHSA-3xx4-hcq6-r2vj · Vendor Advisory
• https://github.com/vim/vim/commit/ac63787734fda2e294e477af52b3bd601517fa78 · Patch
• https://osv.dev/vulnerability/OESA-2023-1885 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1725 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-ALPINE-318-CVE-2023-48233 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1876 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0341.html · Security Note
• https://ubuntu.com/security/CVE-2022-2000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-48706 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6557-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02414 · Security Note
• https://ubuntu.com/security/CVE-2023-48234 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2042 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-48236 · Security Note