Untrusted Search Path

🗓️ 02 Oct 2023 16:28:35Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

vim vulnerability Untrusted Search Path can allow attacker system control data thef

Reporter	Title	Published	Views	Family All 41
AlpineLinux	CVE-2023-4736	2 Sep 202318:02	–	alpinelinux
Apple	About the security content of macOS Sonoma 14.1	25 Oct 202300:00	–	apple
BDU FSTEC	The vulnerability of the Vim text editor lies in the use of an insecure search path, which allows a hacker to execute arbitrary code.	15 Sep 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-4736 affecting package vim for versions less than 9.0.1897-1	27 Sep 202318:02	–	cbl_mariner
Circl	CVE-2023-4736	2 Sep 202322:14	–	circl
CloudLinux	vim: Fix of CVE-2023-4736	21 Sep 202318:02	–	cloudlinux
CNNVD	Vim Code Problem Vulnerability	2 Sep 202300:00	–	cnnvd
CVE	CVE-2023-4736	2 Sep 202318:02	–	cve
Cvelist	CVE-2023-4736 Untrusted Search Path in vim/vim	2 Sep 202318:02	–	cvelist
Debian CVE	CVE-2023-4736	2 Sep 202318:02	–	debiancve

Vulners

Node

vim vimMatch9.0.0820-r0os

AND

vim vimMatch8.2.4542-r1os

AND

vim vimMatch9.0.0270-r0os

AND

vim vimMatch9.0.0999-r0os

AND

vim vimMatch9.0.0437-r0os

AND

vim vimMatch9.0.0728-r0os

AND

vim vimMatch8.2.3082-r0os

AND

vim vimMatch9.0.1215-r0os

AND

vim vimMatch9.0.1395-r0os

AND

vim vimMatch9.0.1607-r0os

AND

vim vimMatch8.2.4969-r0os

AND

vim vimMatch8.2.0357-r0os

AND

vim vimMatch8.2.3650-r0os

AND

vim vimMatch9.0.0009-r0os

AND

vim vimMatch9.0.1085-r0os

AND

vim vimMatch9.0.1558-r0os

AND

vim vimMatch9.0.0815-r0os

AND

vim vimMatch8.2.2800-r0os

AND

vim vimMatch8.2.4542-r0os

AND

vim vimMatch9.0.1520-r0os

AND

vim vimMatch9.0.1495-r0os

AND

vim vimMatch8.2.4708-r0os

AND

vim vimMatch9.0.1337-r1os

AND

vim vimMatch9.0.1291-r0os

AND

vim vimMatch8.2.3500-r0os

AND

vim vimMatch8.2.2677-r0os

AND

vim vimMatch8.2.3300-r0os

AND

vim vimMatch8.2.3275-r0os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.0-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch9.0.1413-r0os

AND

vim vimMatch8.2.2559-r0os

AND

vim vimMatch9.0.0234-r0os

AND

vim vimMatch9.0.0598-r0os

AND

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.4350-r0os

AND

vim vimMatch8.2.5000-r0os

AND

vim vimMatch9.0.1568-r0os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch9.0.1632-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.3156-r0os

AND

vim vimMatch9.0.0050-r0os

AND

vim vimMatch8.2.5055-r0os

AND

vim vimMatch9.0.1676-r0os

AND

vim vimMatch9.0.1198-r0os

AND

vim vimMatch9.0.1440-r1os

AND

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.3779-r0os

AND

vim vimMatch8.2.4836-r0os

AND

vim vimMatch9.0.1440-r0os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch9.0.0224-r0os

AND

vim vimMatch8.2.5170-r0os

AND

vim vimMatch9.0.0792-r0os

AND

vim vimMatch9.0.1337-r0os

AND

vim vimMatch8.2.2677-r1os

AND

vim vimMatch9.0.0124-r0os

AND

vim vimMatch8.2.2968-r0os

AND

vim vimMatch9.0.0369-r0os

AND

vim vimMatch9.0.1261-r0os

AND

vim vimMatch9.0.1107-r0os

AND

vim vimMatch9.0.0636-r0os

AND

vim vimMatch9.0.1251-r0os

AND

vim vimMatch8.2.2822-r1os

AND

vim vimMatch8.2.3779-r1os

AND

alpinelinux alpine_linuxMatchedge

vim vimMatch9.0.1568-r0os

AND

vim vimMatch9.0.1495-r0os

AND

vim vimMatch9.0.1440-r1os

AND

vim vimMatch9.0.1520-r0os

AND

alpinelinux alpine_linuxMatch3.18

Source	Link
secdb	www.secdb.alpinelinux.org/edge/main.yaml
seclists	www.seclists.org/fulldisclosure/2023/Oct/24
github	www.github.com/vim/vim/commit/816fbcc262687b81fc46f82f7bbeb1453addfe0c
huntr	www.huntr.dev/bounties/e1ce0995-4df4-4dec-9cd7-3136ac3e8e71
support	www.support.apple.com/kb/HT213984

22 Dec 2023 19:29Current

7.2High risk

Vulners AI Score7.2

CVSS 37.8

EPSS0.00486