Lucene search

@huntrdevCVELIST:CVE-2023-4733

HistorySep 04, 2023 - 1:47 p.m.

CVE-2023-4733 Use After Free in vim/vim

2023-09-0413:47:09

CWE-416

@huntrdev

www.cve.org

vulnerability

github

repository

vim

use after free

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

Use After Free in GitHub repository vim/vim prior to 9.0.1840.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.1840",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2023/Oct/24

github.com/vim/vim/commit/e1dc9a627536304bc4f738c21e909ad9fcf3974c

huntr.dev/bounties/1ce1fd8c-050a-4373-8004-b35b61590217

lists.fedoraproject.org/archives/list/[email protected]/message/I56ITJAFMFAQ2G3BMGTCGM3GS62V2DTR/

lists.fedoraproject.org/archives/list/[email protected]/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/

lists.fedoraproject.org/archives/list/[email protected]/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/

support.apple.com/kb/HT213984

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

Related for CVELIST:CVE-2023-4733