Vulnerability Lookup

🛡️ CVE-2023-48234

🟢 CVSS 2.8 — Low ✅ No Known Exploit CWE-190 NVD

2.8

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `58f9befca1` which has been included in release version 9.0.2109. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Details

Severity LOW

CVSS Score 2.8

CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CWE CWE-190

Public Exploit ✅ No

Source NVD

Published 2023-11-16

Updated 2026-06-08

Modified 2024-11-21

Fix URL https://github.com/vim/vim/commit/58f9befca1fa172068effad7f2ea5a9d6a7b0cca

Affected Packages

Software	From version	Fixed in
fedora	—	—
vim	—	9.0.2109

References

Mailing List http://www.openwall.com/lists/oss-security/2023/11/16/1

Patch https://github.com/vim/vim/commit/58f9befca1fa172068effad7f2ea5a9d6a7b0cca

Vendor Advisory https://github.com/vim/vim/security/advisories/GHSA-59gw-c949-6phq

Mailing List, Third Party Advisory https://lists.fedoraproject.org/archives/list/[email protected]/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/

Mailing List, Third Party Advisory https://lists.fedoraproject.org/archives/list/[email protected]/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/

Mailing List, Third Party Advisory https://lists.fedoraproject.org/archives/list/[email protected]/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/

Third Party Advisory https://security.netapp.com/advisory/ntap-20231227-0004/

Mailing List http://www.openwall.com/lists/oss-security/2023/11/16/1

Patch https://github.com/vim/vim/commit/58f9befca1fa172068effad7f2ea5a9d6a7b0cca

Vendor Advisory https://github.com/vim/vim/security/advisories/GHSA-59gw-c949-6phq

Mailing List, Third Party Advisory https://lists.fedoraproject.org/archives/list/[email protected]/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/

Mailing List, Third Party Advisory https://lists.fedoraproject.org/archives/list/[email protected]/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/

Mailing List, Third Party Advisory https://lists.fedoraproject.org/archives/list/[email protected]/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/

Third Party Advisory https://security.netapp.com/advisory/ntap-20231227-0004/

🔗 NVD 🔗 Mitre ✅ Fix / Advisory

Similar Threats

Exploit Protection

Help block exploit attempts

BotEraser is designed to detect and help reduce malicious bot traffic that may target known vulnerabilities on your site.

Try BotEraser Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Help block exploit attempts

Company

Resources

Services

Trusted

Subscribe