CVE-2023-48706

Katalog CVE

CVSS 4.7 · Medium EPSS 0,54%

Kerentanan Use After Free pada fedoraproject fedora, netapp hci compute node +2 lainnya. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive `:s` call causes free-ing of memory which may later then be accessed by the initial `:s` command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it seems to work only reliably for the very first :s command. It may also cause a crash of Vim. Version 9.0.2121 contains a fix for this issue.

Rincian

Terbit di NVD

22 November 2023

Terakhir diubah

17 September 2026

Status NVD

Analyzed

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,54% peluang dieksploitasi; lebih tinggi dari 44,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vim/vim/security/advisories/GHSA-c8qm-x72m-q53q exploit · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNMFS3IH74KEMME... advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVA7K73WHQH4KVF... advisory vendor
• https://security.netapp.com/advisory/ntap-20240105-0001/ advisory vendor
• http://www.openwall.com/lists/oss-security/2023/11/22/3 mailing list · patch · advisory pihak ketiga
• https://github.com/vim/vim/commit/26c11c56888d01e298cd8044caf860f3c26f57bb patch
• https://github.com/vim/vim/pull/13552 issue tracking · patch
• https://github.com/gandalf4a/crash_report/blob/main/vim/vim_huaf exploit