Vulnerability CVE-2023-4738: Information

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-4738

Published: Sept. 2, 2023

Modified: Feb. 1, 2024

Error type identifier: CWE-787

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
vim	sisyphus	9.0.1893-alt1	9.1.0050-alt3	ALT-PU-2023-5538-2	329249	Fixed
vim	sisyphus_e2k	9.0.1893-alt1	9.1.0050-alt3	ALT-PU-2023-5551-1	-	Fixed
vim	sisyphus_riscv64	9.0.1893-alt1	9.1.0050-alt3	ALT-PU-2023-5580-1	-	Fixed
vim	p10	9.0.1893-alt1	9.1.0050-alt3	ALT-PU-2023-5553-2	329360	Fixed
vim	p10_e2k	9.0.1893-alt1	9.1.0050-alt3	ALT-PU-2023-5812-1	-	Fixed
vim	c10f1	9.0.1893-alt1	9.1.0050-alt2	ALT-PU-2023-5877-2	330406	Fixed
vim	c9f2	9.0.1893-alt1	9.1.0050-alt2	ALT-PU-2023-5879-2	330408	Fixed

Hyperlink	Resource
https://github.com/vim/vim/commit/ced2c7394aafdc90fb7845e09b3a3fee23d48cb1	Patch
https://huntr.dev/bounties/9fc7dced-a7bb-4479-9718-f956df20f612	Exploit Patch Third Party Advisory
https://support.apple.com/kb/HT213984	Release Notes Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/24	Mailing List Third Party Advisory

Version: v24.5.0