Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-2426
HistoryApr 29, 2023 - 12:00 a.m.

CVE-2023-2426

2023-04-2900:00:00
ubuntu.com
ubuntu.com
13

0.0004 Low

EPSS

Percentile

5.2%

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to
9.0.1499.

Bugs

Notes

Author Note
rodrigo-zaiden issue was likely introduced around versions 8.2.1665 (commit 635414dd) and 8.2.2813 (commit bb01a1ef), that is, affects Ubuntu versions starting from jammy. PoC easily reproduces on affected versions.
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchvim< 2:8.2.3995-1ubuntu2.8UNKNOWN
ubuntu22.10noarchvim< 2:9.0.0242-1ubuntu1.4UNKNOWN
ubuntu23.04noarchvim< 2:9.0.1000-4ubuntu3.1UNKNOWN