Lucene search

@huntrdevCVELIST:CVE-2023-1264

HistoryMar 07, 2023 - 12:00 a.m.

CVE-2023-1264 NULL Pointer Dereference in vim/vim

2023-03-0700:00:00

CWE-476

@huntrdev

www.cve.org

cve-2023-1264

pointer dereference

github

repository

version 9.0.1392

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

33.6%

JSON

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.1392",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vim/vim/commit/7ac5023a5f1a37baafbe1043645f97ba3443d9f6

huntr.dev/bounties/b2989095-88f3-413a-9a39-c1c58a6e6815

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/