Lucene search

@huntrdevCVELIST:CVE-2023-0049

HistoryJan 04, 2023 - 12:00 a.m.

CVE-2023-0049 Out-of-bounds Read in vim/vim

2023-01-0400:00:00

CWE-125

@huntrdev

www.cve.org

out-of-bounds read

vim

github repository

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

47.7%

JSON

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.1143",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2023/Mar/17

github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c

huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3Y752EAVACVC5XY2TMGGOAIU25VQRPDW/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T33LLWHLH63XDCO5OME7NWN63RA4U5HF/

security.gentoo.org/glsa/202305-16

support.apple.com/kb/HT213670

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

47.7%

JSON

Related for CVELIST:CVE-2023-0049