vim: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.3
  CVE-2023-1170

  Heap-based Buffer Overflow in vim/vim

  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

  vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  Mar 3, 2023
• High 7.3
  CVE-2023-1175

  Incorrect Calculation of Buffer Size in vim/vim

  Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

  vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi
  Mar 4, 2023

Revision history

1. 2025-03-30 #7

   Neue Updates von Debian aufgenommen

2. 2023-06-12 #6

   Neue Updates von Debian aufgenommen

3. 2023-04-27 #5

   Neue Updates von SUSE aufgenommen

4. 2023-04-05 #4

   Neue Updates von Amazon aufgenommen

5. 2023-03-20 #3

   Neue Updates von Ubuntu aufgenommen

6. 2023-03-16 #2

   Neue Updates von SUSE und Fedora aufgenommen

7. 2023-03-05 #1

   Initiale Fassung

References

• Github Security Advisory GHSA-4F5C-477M-3P63 vom 2023-03-05
  https://github.com/advisories/GHSA-4f5c-477m-3p63
• Github Security Advisory GHSA-W4C8-8FHQ-883P vom 2023-03-05
  https://github.com/advisories/GHSA-w4c8-8fhq-883p
• PoC vom 2023-03-05
  https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4/
• PoC vom 2023-03-05
  https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e/
• SUSE Security Update SUSE-SU-2023:0781-1 vom 2023-03-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-March/014074.html
• SUSE Security Update SUSE-SU-2023:0760-1 vom 2023-03-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-March/014068.html
• Fedora Security Advisory FEDORA-2023-D4EBE53978 vom 2023-03-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d4ebe53978
• Fedora Security Advisory FEDORA-2023-43CB13AEFB vom 2023-03-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-43cb13aefb
• Fedora Security Advisory FEDORA-2023-030318CA00 vom 2023-03-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-030318ca00
• Ubuntu Security Notice USN-5963-1 vom 2023-03-20
  https://ubuntu.com/security/notices/USN-5963-1
• Amazon Linux Security Advisory ALAS-2023-1716 vom 2023-04-06
  https://alas.aws.amazon.com/ALAS-2023-1716.html
• Amazon Linux Security Advisory ALAS-2023-2005 vom 2023-04-05
  https://alas.aws.amazon.com/AL2/ALAS-2023-2005.html
• SUSE Security Update SUSE-SU-2023:0781-2 vom 2023-04-27
  https://lists.suse.com/pipermail/sle-security-updates/2023-April/014622.html
• Debian Security Advisory DLA-3453 vom 2023-06-12
  https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html
• Debian Security Advisory DLA-4097 vom 2025-03-30
  https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html