Lucene search

K
amazonAmazonALAS-2023-1761
HistoryJun 05, 2023 - 4:39 p.m.

Important: vim

2023-06-0516:39:00
alas.aws.amazon.com
20

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

20.5%

Issue Overview:

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. (CVE-2023-2426)

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. (CVE-2023-2609)

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. (CVE-2023-2610)

Affected Packages:

vim

Issue Correction:
Run yum update vim to update your system.

New Packages:

i686:  
    vim-minimal-9.0.1587-1.79.amzn1.i686  
    xxd-9.0.1587-1.79.amzn1.i686  
    vim-enhanced-9.0.1587-1.79.amzn1.i686  
    vim-common-9.0.1587-1.79.amzn1.i686  
    vim-debuginfo-9.0.1587-1.79.amzn1.i686  
  
noarch:  
    vim-data-9.0.1587-1.79.amzn1.noarch  
    vim-filesystem-9.0.1587-1.79.amzn1.noarch  
  
src:  
    vim-9.0.1587-1.79.amzn1.src  
  
x86_64:  
    vim-common-9.0.1587-1.79.amzn1.x86_64  
    vim-enhanced-9.0.1587-1.79.amzn1.x86_64  
    vim-minimal-9.0.1587-1.79.amzn1.x86_64  
    xxd-9.0.1587-1.79.amzn1.x86_64  
    vim-debuginfo-9.0.1587-1.79.amzn1.x86_64  

Additional References

Red Hat: CVE-2023-2426, CVE-2023-2609, CVE-2023-2610

Mitre: CVE-2023-2426, CVE-2023-2609, CVE-2023-2610

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

20.5%