CVE-2023-48237

2023-11-1623:15:09

Alpine Linux Development Team

security.alpinelinux.org

vim

integer overflow

version 9.0.2112

user interaction

vulnerability

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.2%

JSON

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 6bf131888 which has been included in version 9.0.2112. Users are advised to upgrade. There are no known workarounds for this vulnerability.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-mainnoarchvim= 9.0.2073-r0UNKNOWN
Alpine3.17-mainnoarchvim= 9.0.0999-r0UNKNOWN
Alpine3.15-mainnoarchvim= 8.2.4836-r1UNKNOWN
Alpine3.16-mainnoarchvim= 8.2.5000-r1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.18-main	noarch	vim	= 9.0.2073-r0	UNKNOWN
Alpine	3.17-main	noarch	vim	= 9.0.0999-r0	UNKNOWN
Alpine	3.15-main	noarch	vim	= 8.2.4836-r1	UNKNOWN
Alpine	3.16-main	noarch	vim	= 8.2.5000-r1	UNKNOWN