Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-2426 EUVD-2023-33915GHSA-732j-vmpr-mg9v

Use of Out-of-range Pointer Offset in vim/vim

Published Apr 29, 2023 · Updated Oct 15, 2024 · Assigned by @huntr_ai

Vendor: vim Product: vim/vim Package: vim Package: vim Package: vim Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Affected products

VendorProductAffectedFixed
vim vim/vim unspecified – < 9.0.1499 9.0.1499

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 vim 2:9.0.1378-2 —
Debian 13 vim 2:9.0.1378-2 —
Debian 12 vim 2:9.0.1378-2 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS vim 2:8.2.3995-1ubuntu2.8 USN-6154-1
Ubuntu 20.04 LTS vim 2:8.1.2269-1ubuntu5.15 USN-6154-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS vim 2:8.0.1453-1ubuntu1.13+esm1 USN-6154-1
Ubuntu Pro 16.04 LTS vim 2:7.4.1689-3ubuntu1.5+esm18 USN-6154-1
Ubuntu Pro 14.04 LTS vim 2:7.4.052-1ubuntu3.1+esm10 USN-6154-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 vim 9.0.1632-150500.20.3.1 SUSE-SU-2023:3497-1
SLES 15 SP4 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLES 15 SP3 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLES 15 SP2 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLES 15 SP1 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 vim 9.0.1572-17.18.1 SUSE-SU-2023:3463-1
SLES 12 SP2 vim 9.0.1572-17.18.1 SUSE-SU-2023:3463-1
SLES for SAP 15 SP3 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLES for SAP 15 SP2 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLES for SAP 15 SP1 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLES for SAP 12 SP5 vim 9.0.1572-17.18.1 SUSE-SU-2023:3463-1
SLE Real Time 15 SP3 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLE Micro 5.4 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLE Micro 5.3 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLE Micro 5.2 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLE Micro 5.1 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLE HPC 15 SP3 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLE HPC 15 SP2 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SLE HPC 15 SP1 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SUSE Manager Server 4.2 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SUSE Manager Proxy 4.2 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SUSE Enterprise Storage 7.1 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
SUSE Enterprise Storage 7 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed vim 9.0.1504-1.1 openSUSE-SU-2024:12905-1
openSUSE Leap 15.5 vim 9.0.1632-150500.20.3.1 SUSE-SU-2023:3497-1
openSUSE Leap 15.4 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.4 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1
openSUSE Leap Micro 5.3 vim 9.0.1572-150000.5.46.1 SUSE-SU-2023:2640-1

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) vim 9.0.1562-1 —

Advisories 6

References