Denial Of Service (DoS)

🗓️ 10 Mar 2023 14:11:24Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 18 Views

vim software vulnerable to heap-based buffer overflow

Reporter	Title	Published	Views	Family All 108
Huntr	heap-buffer-overflow in utf_ptr2char	1 Mar 202301:52	–	huntr
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-151)	4 Apr 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim (ALAS-2023-2005)	5 Apr 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2023-1716)	6 Apr 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1815)	9 May 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1833)	9 May 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1858)	13 May 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1883)	13 May 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2023-2009)	2 Jun 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.0 : vim (EulerOS-SA-2023-2030)	1 Jun 202300:00	–	nessus

Vulners

Node

AND

vim vimMatch2:8.2.2434-3debian

vim vimMatch2:8.2.1913-1+b2debian

debian debian_linuxMatch999

AND

focal focalMatch2:8.1.2269-1ubuntu5debian

debian debian_linux

AND

google bionicMatch2:8.0.1453-1ubuntu1debian

google bionicMatch2:8.0.1453-1ubuntu1.4debian

google bionicMatch2:8.0.1453-1ubuntu1.3debian

debian debian_linux

AND

vim vimMatch9.0.1337-r0os

vim vimMatch8.2.4350-r0os

vim vimMatch9.0.1085-r0os

vim vimMatch8.2.4542-r0os

vim vimMatch9.0.0234-r0os

vim vimMatch8.2.0735-r0os

vim vimMatch9.0.0728-r0os

vim vimMatch9.0.0999-r0os

vim vimMatch8.2.2956-r0os

vim vimMatch9.0.0270-r0os

vim vimMatch8.2.5170-r0os

vim vimMatch8.2.2677-r0os

vim vimMatch9.0.1215-r0os

vim vimMatch9.0.1261-r0os

vim vimMatch8.2.4542-r1os

vim vimMatch8.2.3779-r1os

vim vimMatch8.2.4836-r0os

vim vimMatch8.2.2852-r0os

vim vimMatch9.0.1251-r0os

vim vimMatch8.2.4969-r0os

vim vimMatch8.2.3437-r0os

vim vimMatch8.2.2822-r1os

vim vimMatch8.2.3779-r0os

vim vimMatch8.2.2800-r0os

vim vimMatch9.0.0224-r0os

vim vimMatch8.2.3567-r0os

vim vimMatch8.2.4708-r0os

vim vimMatch8.2.3650-r0os

vim vimMatch8.2.2677-r1os

vim vimMatch8.2.4173-r0os

vim vimMatch8.2.0-r0os

vim vimMatch9.0.0369-r0os

vim vimMatch8.2.3156-r0os

vim vimMatch8.2.5000-r0os

vim vimMatch9.0.1198-r0os

vim vimMatch9.0.1291-r0os

vim vimMatch9.0.0636-r0os

vim vimMatch9.0.0050-r0os

vim vimMatch9.0.0124-r0os

vim vimMatch8.2.3082-r0os

vim vimMatch8.2.3275-r0os

vim vimMatch9.0.0792-r0os

vim vimMatch9.0.1107-r0os

vim vimMatch8.2.0357-r0os

vim vimMatch8.2.4619-r0os

vim vimMatch8.2.3500-r0os

vim vimMatch8.2.2968-r0os

vim vimMatch8.2.3300-r0os

vim vimMatch8.2.2559-r0os

vim vimMatch9.0.1337-r1os

vim vimMatch8.2.5055-r0os

vim vimMatch9.0.0598-r0os

vim vimMatch9.0.0437-r0os

vim vimMatch9.0.0009-r0os

vim vimMatch9.0.0820-r0os

vim vimMatch9.0.0815-r0os

alpinelinux alpine_linuxMatchedge

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-1170
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/
github	www.github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c
huntr	www.huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4

07 Nov 2023 21:28Current

4Medium risk

Vulners AI Score4

CVSS 36.6 - 7.3

EPSS0.00483

SSVC