Heap-based Buffer Overflow

🗓️ 03 Feb 2023 17:08:13Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 22 Views

vim vulnerability heap-based buffer overflow denial of service arbitrary code executio

Reporter	Title	Published	Views	Family All 101
Huntr	Heap-based Buffer Overflow in function msg_puts_printf	3 Jan 202314:05	–	huntr
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-117)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim (ALAS-2023-1975)	7 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2023-1716)	6 Apr 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1460)	8 Mar 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1485)	8 Mar 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1543)	19 Mar 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1568)	19 Mar 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2023-1650)	27 Apr 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.0 : vim (EulerOS-SA-2023-1684)	27 Apr 202300:00	–	nessus

Vulners

Node

devel develMatch2:8.2.2434-3ubuntu1debian

AND

devel develMatch2:8.2.0716-3ubuntu2debian

AND

devel develMatch2:8.2.2434-1ubuntu1debian

AND

devel develMatch2:8.2.1913-1ubuntu3debian

AND

debian debian_linux

OR

vim vimMatch2:8.2.2434-3debian

AND

vim vimMatch2:8.2.1913-1+b2debian

AND

debian debian_linuxMatch999

OR

vim vimMatch8.2.4836-r0os

AND

vim vimMatch8.2.2800-r0os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.4350-r0os

AND

vim vimMatch8.2.2559-r0os

AND

vim vimMatch8.2.5055-r0os

AND

vim vimMatch9.0.0009-r0os

AND

vim vimMatch8.2.5170-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch9.0.0224-r0os

AND

vim vimMatch8.2.3650-r0os

AND

vim vimMatch9.0.0728-r0os

AND

vim vimMatch8.2.3779-r1os

AND

vim vimMatch9.0.0815-r0os

AND

vim vimMatch8.2.2968-r0os

AND

vim vimMatch9.0.0369-r0os

AND

vim vimMatch9.0.0820-r0os

AND

vim vimMatch8.2.5000-r0os

AND

vim vimMatch9.0.0234-r0os

AND

vim vimMatch8.2.0-r0os

AND

vim vimMatch8.2.3156-r0os

AND

vim vimMatch9.0.1107-r0os

AND

vim vimMatch8.2.4969-r0os

AND

vim vimMatch8.2.4542-r1os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch9.0.0437-r0os

AND

vim vimMatch9.0.0598-r0os

AND

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.2677-r0os

AND

vim vimMatch8.2.2677-r1os

AND

vim vimMatch9.0.0999-r0os

AND

vim vimMatch8.2.3500-r0os

AND

vim vimMatch9.0.1085-r0os

AND

vim vimMatch9.0.0050-r0os

AND

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.3300-r0os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.3082-r0os

AND

vim vimMatch9.0.0124-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.2822-r1os

AND

vim vimMatch9.0.0792-r0os

AND

vim vimMatch8.2.4708-r0os

AND

vim vimMatch8.2.3275-r0os

AND

vim vimMatch9.0.0636-r0os

AND

vim vimMatch8.2.0357-r0os

AND

vim vimMatch9.0.0270-r0os

AND

vim vimMatch8.2.4542-r0os

AND

vim vimMatch8.2.3779-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
seclists	www.seclists.org/fulldisclosure/2023/Mar/17
git	www.git//git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2023-0051
security	www.security.gentoo.org/glsa/202305-16
github	www.github.com/vim/vim/commit/c32949b0779106ed5710ae3bffc5053e49083ab4
huntr	www.huntr.dev/bounties/1c8686db-baa6-42dc-ba45-aed322802de9
support	www.support.apple.com/kb/HT213670

03 May 2023 14:35Current

7.7High risk

Vulners AI Score7.7

CVSS 37.3 - 7.8

EPSS0.00042

SSVC

vim vulnerability remote attacker memory management denial of service arbitrary code execution