CVE-2023-5344

Name
CVE-2023-5344
Description
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://huntr.dev/bounties/530cb762-899e-48d7-b50e-dad09eb775bf
MISC https://github.com/vim/vim/commit/3bd7fa12e146c6051490d048a4acbfba974eeb04
MISC https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4W665GQBN6S6ZDMYWVF4X7KMFI7AQKJL/
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZOXBUJLJ5VSPN3YXWN7XZA4JDYKNE7GZ/
MISC https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPT7NMYJRLBPIALGSE24UWTY6F774GZW/
security@huntr.dev https://support.apple.com/kb/HT214036
security@huntr.dev https://support.apple.com/kb/HT214037
security@huntr.dev https://support.apple.com/kb/HT214038
security@huntr.dev http://seclists.org/fulldisclosure/2023/Dec/10
security@huntr.dev http://seclists.org/fulldisclosure/2023/Dec/11
security@huntr.dev http://seclists.org/fulldisclosure/2023/Dec/9

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:* vim >= None < 9.0.1969

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
vim 3.17-main 9.0.0999-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
vim 3.18-main 9.0.2073-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
vim 3.15-main 8.2.4836-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
vim 3.16-main 8.2.5000-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable