Description
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
CVSS breakdown
CVSS 3.0
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Apple / macOS13.3 – 13.3
- fedoraproject / fedora36 – 36
- fedoraproject / fedora37 – 37
- neovim / neovim0.1.0 – 0.10.0
- NetApp / hci_compute_node
- vim / vim9.0.1143
- vim / vim/vimunspecified – 9.0.1143
References
- MISChttps://huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9
- PATCHhttps://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3Y752EAVACVC5XY2TMGGOAIU25VQRPDW/
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T33LLWHLH63XDCO5OME7NWN63RA4U5HF/
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213670
- MAILING_LISThttp://seclists.org/fulldisclosure/2023/Mar/17
- MISChttps://security.gentoo.org/glsa/202305-16
Updated 7m ago · 8 sources