CVE-2023-48232: vim +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-48232

CVSS 4.3 · Medium EPSS 0,67%

Kerentanan Improper Handling of Exceptional Conditions pada vim, fedoraproject fedora. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues on the next physical line directly in the window border because the 'cpo' setting includes the 'n' flag. Only users with non-default settings are affected and the exception should only result in a crash. This issue has been addressed in commit `cb0b99f0` which has been included in release version 9.0.2107. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Rincian

Terbit di NVD: 16 November 2023
Terakhir diubah: 23 Juni 2026
Status NVD: Modified
CVSS 3.1: 4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-755: Improper Handling of Exceptional Conditions
EPSS (30 hari): 0,67% peluang dieksploitasi; lebih tinggi dari 50,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
vim	vim	Semua versi sebelum 9.0.2107
fedoraproject	fedora	Versi 37
fedoraproject	fedora	Versi 38
fedoraproject	fedora	Versi 39

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/vim/vim/security/advisories/GHSA-f6cx-x634-hqpw advisory vendor
https://github.com/vim/vim/commit/cb0b99f0672d8446585d26e998343dceca17d1ce patch
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ET... mailing list · advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSE... mailing list · advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE... mailing list · advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20231227-0006/ advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2023/11/16/1 mailing list

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.