Medium ALAS2-2023-2288 1 CVE

Moderate: vim security update (Amazon Linux 2)

Published Oct 12, 2023 · Updated Oct 19, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5344: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

Fixed packages 8

Release	Package	Fixed in
Amazon Linux · 2	vim-common	2:9.0.1882-1.amzn2.0.2
Amazon Linux · 2	vim-data	2:9.0.1882-1.amzn2.0.2
Amazon Linux · 2	vim-debuginfo	2:9.0.1882-1.amzn2.0.2
Amazon Linux · 2	vim-enhanced	2:9.0.1882-1.amzn2.0.2
Amazon Linux · 2	vim-filesystem	2:9.0.1882-1.amzn2.0.2
Amazon Linux · 2	vim-minimal	2:9.0.1882-1.amzn2.0.2
Amazon Linux · 2	vim-X11	2:9.0.1882-1.amzn2.0.2
Amazon Linux · 2	xxd	2:9.0.1882-1.amzn2.0.2

Vulnerabilities 1

Medium 4.0

CVE-2023-5344

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Oct 2, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-5344.html