Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6452-1
HistoryOct 25, 2023 - 12:00 a.m.

Vim vulnerabilities

2023-10-2500:00:00
ubuntu.com
36
ubuntu 23.04
ubuntu 22.04 lts
ubuntu 20.04 lts
ubuntu 18.04 esm
ubuntu 16.04 esm
ubuntu 14.04 esm
memory management
denial of service
out of bounds
execute arbitrary code

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.7%

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • vim - Vi IMproved - enhanced vi editor

Details

It was discovered that Vim could be made to divide by zero. An attacker
could possibly use this issue to cause a denial of service. This issue
only affected Ubuntu 23.04. (CVE-2023-3896)

It was discovered that Vim did not properly manage memory. An attacker
could possibly use this issue to cause a denial of service or execute
arbitrary code. (CVE-2023-4733, CVE-2023-4750)

It was discovered that Vim contained an arithmetic overflow. An attacker
could possibly use this issue to cause a denial of service. This issue
only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10.
(CVE-2023-4734)

It was discovered that Vim could be made to write out of bounds. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. (CVE-2023-4735, CVE-2023-5344)

It was discovered that Vim could be made to write out of bounds. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 23.04 and Ubuntu
23.10. (CVE-2023-4738)

It was discovered that Vim could be made to write out of bounds. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu
16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and
Ubuntu 23.04. (CVE-2023-4751)

It was discovered that Vim did not properly manage memory. An attacker
could possibly use this issue to cause a denial of service or execute
arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04
LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4752, CVE-2023-5535)

It was discovered that Vim could be made to write out of bounds. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu
22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4781)

It was discovered that Vim could be made to dereference invalid memory. An
attacker could possibly use this issue to cause a denial of service.
(CVE-2023-5441)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchvim< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-athena< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-common< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-dbgsym< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-doc< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-gtk3< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-gtk3-dbgsym< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-gui-common< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-motif< 2:9.0.1672-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchvim-motif-dbgsym< 2:9.0.1672-1ubuntu2.1UNKNOWN
Rows per page:
1-10 of 1491

Related

openvas 32
nessus 46
cloudfoundry 1
osv 3
redos 2
amazon 5
fedora 6
photon 7
slackware 2
mageia 2
debian 1
cloudlinux 1
huntr 8
cvelist 8
alpinelinux 7
veracode 8
ubuntucve 10
cbl_mariner 8
debiancve 7
nvd 9
prion 8
cve 9
redhatcve 7
cnvd 2
openvas
openvas
Ubuntu: Security Advisory (USN-6452-1)
2023-10-26 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-3288)
2023-12-12 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1050)
2024-01-05 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Vim vulnerabilities (USN-6452-1)
2023-10-25 00:00:00
EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-3320)
2024-01-16 00:00:00
EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2024-1050)
2024-01-16 00:00:00
cloudfoundry
cloudfoundry
USN-6452-1: Vim vulnerabilities | Cloud Foundry
2023-12-04 00:00:00
osv
osv
vim vulnerabilities
2023-10-25 16:47:19
vim - security update
2023-09-29 00:00:00
CVE-2023-3896
2023-08-07 13:15:12
redos
redos
ROS-20240329-16
2024-03-29 00:00:00
ROS-20240329-05
2024-03-29 00:00:00
amazon
amazon
Important: vim
2023-09-27 22:48:00
Important: vim
2023-09-13 23:15:00
Important: vim
2023-09-27 22:15:00
fedora
fedora
[SECURITY] Fedora 39 Update: vim-9.0.2048-1.fc39
2023-11-03 19:01:57
[SECURITY] Fedora 38 Update: vim-9.0.1872-1.fc38
2023-09-07 01:30:03
[SECURITY] Fedora 37 Update: vim-9.0.1872-1.fc37
2023-09-10 01:20:53
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0647
2023-09-12 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0091
2023-09-09 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0467
2023-09-08 00:00:00
slackware
slackware
[slackware-security] vim
2023-09-11 20:28:51
[slackware-security] vim
2023-10-24 22:27:40
mageia
mageia
Updated vim packages fix security vulnerability
2023-09-27 19:31:30
Updated vim packages fix security vulnerabilities
2023-10-28 00:49:40
debian
debian
[SECURITY] [DLA 3588-1] vim security update
2023-09-29 13:52:33
cloudlinux
cloudlinux
vim: Fix of 2 CVEs
2023-10-26 20:27:47
huntr
huntr
heap-buffer-overflow in function utfc_ptr2len
2023-01-22 15:44:03
OOB Write ops.c
2023-05-26 05:17:54
heap-use-after-free in function editing_arg_idx
2023-10-10 12:01:26
cvelist
cvelist
CVE-2023-4751 Heap-based Buffer Overflow in vim/vim
2023-09-03 18:54:47
CVE-2023-4735 Out-of-bounds Write in vim/vim
2023-09-02 17:46:39
CVE-2023-4750 Use After Free in vim/vim
2023-09-04 13:47:02
alpinelinux
alpinelinux
CVE-2023-5535
2023-10-11 20:15:10
CVE-2023-4735
2023-09-02 18:15:20
CVE-2023-4752
2023-09-04 14:15:08
veracode
veracode
Use After Free
2023-10-19 04:10:13
Out-of-bounds Write
2023-10-02 16:28:31
Use After Free
2023-10-02 16:24:56
ubuntucve
ubuntucve
CVE-2023-4750
2023-09-04 00:00:00
CVE-2023-4751
2023-09-03 00:00:00
CVE-2023-5535
2023-10-11 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-4750 affecting package vim for versions less than 9.0.1897-1
2023-09-27 18:02:50
CVE-2023-4735 affecting package vim for versions less than 9.0.1897-1
2023-09-27 18:02:50
CVE-2023-4752 affecting package vim for versions less than 9.0.1897-1
2023-09-27 18:02:50
debiancve
debiancve
CVE-2023-4751
2023-09-03 19:15:43
CVE-2023-4735
2023-09-02 18:15:20
CVE-2023-4750
2023-09-04 14:15:08
nvd
nvd
CVE-2023-4751
2023-09-03 19:15:43
CVE-2023-4735
2023-09-02 18:15:20
CVE-2023-4738
2023-09-02 20:15:07
prion
prion
Design/Logic Flaw
2023-09-02 18:15:00
Design/Logic Flaw
2023-10-11 20:15:00
Heap overflow
2023-09-03 19:15:00
cve
cve
CVE-2023-4750
2023-09-04 14:15:08
CVE-2023-5535
2023-10-11 20:15:10
CVE-2023-3896
2023-08-07 13:15:12
redhatcve
redhatcve
CVE-2023-5441
2023-10-09 18:54:25
CVE-2023-4735
2023-09-05 15:13:31
CVE-2023-4751
2023-09-05 15:13:45
cnvd
cnvd
Vim buffer overflow vulnerability (CNVD-2023-70067)
2023-09-13 00:00:00
Vim buffer overflow vulnerability (CNVD-2023-72249)
2023-09-11 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.7%

JSON
Related for USN-6452-1
openvas32nessus46cloudfoundry1osv3redos2amazon5fedora6photon7slackware2mageia2debian1cloudlinux1huntr8cvelist8alpinelinux7veracode8ubuntucve10cbl_mariner8debiancve7nvd9prion8cve9redhatcve7cnvd2