Lucene search

@huntrdevCVELIST:CVE-2023-1264

HistoryMar 07, 2023 - 12:00 a.m.

CVE-2023-1264 NULL Pointer Dereference in vim/vim

2023-03-0700:00:00

CWE-476

@huntrdev

www.cve.org

cve-2023-1264

pointer dereference

github

repository

version 9.0.1392

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.1%

JSON

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.1392",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vim/vim/commit/7ac5023a5f1a37baafbe1043645f97ba3443d9f6

huntr.dev/bounties/b2989095-88f3-413a-9a39-c1c58a6e6815

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/