WID-SEC-W-2023-2249

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

vim: Mehrere Schwachstellen

view advisory published 2023-09-03

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in vim ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Dateien zu manipulieren oder beliebigen Code auszuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2023-4751UShigh7.8—
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
CVE-2023-4738UShigh7.8—
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
CVE-2023-4736UShigh7.8—
Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.
CVE-2023-4735UShigh7.8—
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
CVE-2023-4734UShigh7.8—
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan