Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:44159
HistoryNov 06, 2023 - 7:00 p.m.

Denial Of Service (DoS)

2023-11-0619:00:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
denial of service
vim
vulnerability
heap-use-after-free
exploit

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0

Percentile

5.1%

JSON

vim is vulnerable to Denial of Service (DoS). An attacker could exploit this vulnerability by tricking a user into opening a specially crafted Vim file. The file would cause Vim to allocate and free memory in a way that triggers the heap-use-after-free via the function ga_grow_inner vulnerability, which allows the attacker to disrupt service.

Related

nessus 31
cbl_mariner 1
amazon 2
ubuntucve 1
openvas 22
redhatcve 1
alpinelinux 1
mageia 1
debiancve 1
nvd 1
rosalinux 1
redos 1
cve 1
prion 1
cvelist 1
photon 3
fedora 2
ubuntu 1
osv 1
cloudfoundry 1
ibm 1
hp 1
nessus
nessus
Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-431)
2023-11-15 00:00:00
Vim < 9.0.2068 Use After Free
2023-11-02 00:00:00
Photon OS 5.0: Vim PHSA-2023-5.0-0134
2024-07-24 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-46246 affecting package vim for versions less than 9.0.2112-1
2023-12-05 04:40:34
amazon
amazon
Medium: vim
2023-11-09 19:19:00
Medium: vim
2023-11-29 23:18:00
ubuntucve
ubuntucve
CVE-2023-46246
2023-10-27 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0314)
2023-11-10 00:00:00
Fedora: Security Advisory for vim (FEDORA-2023-ca6c3651fe)
2023-12-18 00:00:00
Fedora: Security Advisory (FEDORA-2023-3fbd936b15)
2023-12-18 00:00:00
redhatcve
redhatcve
CVE-2023-46246
2023-10-30 11:28:42
alpinelinux
alpinelinux
CVE-2023-46246
2023-10-27 19:15:41
mageia
mageia
Updated vim packages fix a security vulnerability
2023-11-10 02:37:11
debiancve
debiancve
CVE-2023-46246
2023-10-27 19:15:41
nvd
nvd
CVE-2023-46246
2023-10-27 19:15:41
rosalinux
rosalinux
Advisory ROSA-SA-2024-2435
2024-06-27 10:16:38
redos
redos
ROS-20240328-02
2024-03-28 00:00:00
cve
cve
CVE-2023-46246
2023-10-27 19:15:41
prion
prion
Integer overflow
2023-10-27 19:15:00
cvelist
cvelist
CVE-2023-46246 Integer Overflow in :history command in Vim
2023-10-27 18:36:23
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0134
2023-11-02 00:00:00
Moderate Photon OS Security Update - PHSA-2023-4.0-0504
2023-11-02 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0684
2023-11-09 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: vim-9.0.2167-1.fc39
2023-12-17 01:36:45
[SECURITY] Fedora 38 Update: vim-9.0.2167-1.fc38
2023-12-17 01:44:41
ubuntu
ubuntu
Vim vulnerabilities
2023-12-14 00:00:00
osv
osv
vim vulnerabilities
2023-12-14 17:31:12
cloudfoundry
cloudfoundry
USN-6557-1: Vim vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues (3)
2024-08-01 17:24:14
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for VERACODE:44159
nessus31cbl_mariner1amazon2ubuntucve1openvas22redhatcve1alpinelinux1mageia1debiancve1nvd1rosalinux1redos1cve1prion1cvelist1photon3fedora2ubuntu1osv1cloudfoundry1ibm1hp1