CVE-2023-1175CWE-131

CVE-2023-1175

Medium · published March 4, 2023

CVSS v3.1
6.6
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00448 · 38.0th percentile
Weakness
CWE-131 · Incorrect Calculation of Buffer Size
Published
2023-03-04T21:15Z
Affected products (7)
ProductVersionsFixed in
debian/debian_linuxall versions—
debian/debian_linuxall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
neovim/neovim≤ 0.8.3—
vim/vim< 9.0.13789.0.1378
References (13)
https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba · [email protected]https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e · [email protected]https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/ · [email protected]https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba · af854a3a-2127-422b-91ae-364da2661108https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 04 MAR 00:00Z
    Incorrect Calculation of Buffer Size in vim/vim
    cvelistv5