CVE-2023-5344

Name

CVE-2023-5344

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

NVD Severity

low

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

Exploits

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
MISC	https://huntr.dev/bounties/530cb762-899e-48d7-b50e-dad09eb775bf
MISC	https://github.com/vim/vim/commit/3bd7fa12e146c6051490d048a4acbfba974eeb04
MISC	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4W665GQBN6S6ZDMYWVF4X7KMFI7AQKJL/
Mailing List	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZOXBUJLJ5VSPN3YXWN7XZA4JDYKNE7GZ/
MISC	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPT7NMYJRLBPIALGSE24UWTY6F774GZW/
security@huntr.dev	https://support.apple.com/kb/HT214036
security@huntr.dev	https://support.apple.com/kb/HT214037
security@huntr.dev	https://support.apple.com/kb/HT214038
security@huntr.dev	http://seclists.org/fulldisclosure/2023/Dec/10
security@huntr.dev	http://seclists.org/fulldisclosure/2023/Dec/11
security@huntr.dev	http://seclists.org/fulldisclosure/2023/Dec/9
af854a3a-2127-422b-91ae-364da2661108	https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html

CPE URI	Source package	Min version	Max version
	vim/vim	>= unspecified	< 9.0.1969

Source package	Branch	Version	Maintainer	Status
vim	edge-main	9.0.1994-r0	Natanael Copa <ncopa@alpinelinux.org>	fixed
vim	edge-main	9.0.1888-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	3.22-main	9.0.1994-r0	None	fixed
vim	3.21-main	9.0.1994-r0	None	fixed
vim	3.20-main	9.0.1994-r0	None	fixed
vim	3.19-main	9.0.1994-r0	None	fixed
vim	3.18-main	9.0.2073-r0	Natanael Copa <ncopa@alpinelinux.org>	fixed
vim	3.17-main	9.0.0999-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable