Lucene search

@huntrdevCVELIST:CVE-2023-1175

HistoryMar 04, 2023 - 12:00 a.m.

CVE-2023-1175 Incorrect Calculation of Buffer Size in vim/vim

2023-03-0400:00:00

CWE-131

@huntrdev

www.cve.org

buffer size calculation

github

repository

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

JSON

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.1378",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba

huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e

lists.debian.org/debian-lts-announce/2023/06/msg00015.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

JSON

Related for CVELIST:CVE-2023-1175