Log in Start free

Vulnerability · Published Nov 16, 2023 · Assigned by GitHub_M

CVE-2023-48231Use-After-Free in win_close() in vim

Low 3.9

In plain English

A low-severity use-after-free in vim from vim. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.9Low
Exploit odds (30 days)0.7%top 47.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20vim9.0.2112-r0ALPINE-CVE-2023-48231
Alpine:v3.21vim9.0.2112-r0ALPINE-CVE-2023-48231
Alpine:v3.22vim9.0.2112-r0ALPINE-CVE-2023-48231
Alpine:v3.23vim9.0.2112-r0ALPINE-CVE-2023-48231
Alpine:v3.24vim9.0.2112-r0ALPINE-CVE-2023-48231
Debian:12vimno fix listedDEBIAN-CVE-2023-48231
Debian:13vim2:9.0.2116-1DEBIAN-CVE-2023-48231
Debian:14vim2:9.0.2116-1DEBIAN-CVE-2023-48231
Ubuntu:22.04:LTSvim2:8.2.3995-1ubuntu2.15UBUNTU-CVE-2023-48231
Ubuntu:22.04:LTSvim2:8.2.3995-1ubuntu2.15USN-6557-1

Affected products (as reported)

VendorProductVersions
vim vim < 9.0.2106

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

References