Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 494
Alerts This Week
Warning Icon 1 494

SUSE: 2023:4557-1 Critical: vim heap overflow and other issues

suse
Calendar Grey November 24, 2023
Scroller Suse
A recent security patch for vim has been released, outlining corrections and severity assessments for various vulnerabilities.
* bsc#1214922 * bsc#1214924 * bsc#1214925 * bsc#1215004 * bsc#1215006

Summary

## This update for vim fixes the following issues: Updated to version 9.0 with patch level 2103, fixes the following security problems * CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940) * CVE-2023-5441: vim: segfault in exmode when redrawing (bsc#1216001) * CVE-2023-5535: vim: use-after-free from buf_contents_changed() (bsc#1216167) * CVE-2023-46246: vim: Integer Overflow in :history command (bsc#1216696) * CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both (bsc#1214922) * CVE-2023-4735: vim: OOB Write ops.c (bsc#1214924) * CVE-2023-4734: vim: segmentation fault in function f_fullcommand (bsc#1214925) * CVE-2023-4733: vim: use-after-free in function buflist_altfpos (bsc#1215004)

Topics%20covered

Topics Covered

security advisory buffer overflow code execution important issue vim update SUSE distribution

References

* bsc#1214922

* bsc#1214924

* bsc#1214925

* bsc#1215004

* bsc#1215006

* bsc#1215033

* bsc#1215940

* bsc#1216001

* bsc#1216167

* bsc#1216696

Cross-

* CVE-2023-46246

* CVE-2023-4733

* CVE-2023-4734

* CVE-2023-4735

* CVE-2023-4738

* CVE-2023-4752

* CVE-2023-4781

* CVE-2023-5344

* CVE-2023-5441

* CVE-2023-5535

CVSS scores:

* CVE-2023-46246 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2023-46246 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2023-4733 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

* CVE-2023-4733 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2023-4733 ( NVD ): 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

* CVE-2023-4734 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:4557-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow code execution important issue vim update SUSE distribution

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.