Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 23.10 USN-6452-1 Critical: Vulnerabilities in Vim Software

ubuntu
Calendar Grey October 25, 2023
Dist Ubuntu Esm H88
Several security vulnerabilities in Vim have been resolved on Ubuntu. Please update immediately to mitigate risk of exploitation and enhance your system's protection.
Several security issues were fixed in Vim.

Summary

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

It was discovered that Vim could be made to divide by zero. An attacker

could possibly use this issue to cause a denial of service. This issue

only affected Ubuntu 23.04. (CVE-2023-3896)

It was discovered that Vim did not properly manage memory. An attacker

could possibly use this issue to cause a denial of service or execute

arbitrary code. (CVE-2023-4733, CVE-2023-4750)

It was discovered that Vim contained an arithmetic overflow. An attacker

could possibly use this issue to cause a denial of service. This issue

only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10.

(CVE-2023-4734)

It was discovered that Vim could be made to write out of bounds. An

attacker could possibly use this issue to cause a denial of service or

execute arbitrary code. (CVE-2023-4735, CVE-2023-5344)

It was discovered that Vim could be made to write out of ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu memory management vim out of bounds arithmetic overflow

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   vim                             2:9.0.1672-1ubuntu2.1
   vim-athena                      2:9.0.1672-1ubuntu2.1
   vim-gtk3                        2:9.0.1672-1ubuntu2.1
   vim-nox                         2:9.0.1672-1ubuntu2.1
   vim-tiny                        2:9.0.1672-1ubuntu2.1
   xxd                             2:9.0.1672-1ubuntu2.1

Ubuntu 23.04:
   vim                             2:9.0.1000-4ubuntu3.2
   vim-athena                      2:9.0.1000-4ubuntu3.2
   vim-gtk3                        2:9.0.1000-4ubuntu3.2
   vim-nox                         2:9.0.1000-4ubuntu3.2
   vim-tiny                        2:9.0.1000-4ubuntu3.2
   xxd                             2:9.0.1000-4ubuntu3.2

Ubuntu 22.04 LTS:
   vim                             2:8.2.3995-1ubuntu2.13
   vim-athena                      2:8.2.3995-1ubuntu2.13
   vim-gtk                         2:8.2.3995-1ubuntu2.13
   vim-gtk3                        2:8.2.3995-1ubuntu2.13
   vim-nox                         2:8.2.3995-1ubuntu2.13
   vim-tiny                        2:8.2.3995-1ubuntu2.13
   xxd                             2:8.2.3995-1ubuntu2.13

Ubuntu 20.04 LTS:
   vim                             2:8.1.2269-1ubuntu5.20
   vim-athena                      2:8.1.2269-1ubuntu5.20
   vim-gtk                         2:8.1.2269-1ubuntu5.20
   vim-gtk3                        2:8.1.2269-1ubuntu5.20
   vim-nox                         2:8.1.2269-1ubuntu5.20
   vim-tiny                        2:8.1.2269-1ubuntu5.20
   xxd                             2:8.1.2269-1ubuntu5.20

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
   vim                             2:8.0.1453-1ubuntu1.13+esm6
   vim-athena                      2:8.0.1453-1ubuntu1.13+esm6
   vim-gtk                         2:8.0.1453-1ubuntu1.13+esm6
   vim-gtk3                        2:8.0.1453-1ubuntu1.13+esm6
   vim-nox                         2:8.0.1453-1ubuntu1.13+esm6
   vim-tiny                        2:8.0.1453-1ubuntu1.13+esm6
   xxd                             2:8.0.1453-1ubuntu1.13+esm6

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
   vim                             2:7.4.1689-3ubuntu1.5+esm20
   vim-athena                      2:7.4.1689-3ubuntu1.5+esm20
   vim-gtk                         2:7.4.1689-3ubuntu1.5+esm20
   vim-gtk3                        2:7.4.1689-3ubuntu1.5+esm20
   vim-nox                         2:7.4.1689-3ubuntu1.5+esm20
   vim-tiny                        2:7.4.1689-3ubuntu1.5+esm20

Ubuntu 14.04 LTS (Available with Ubuntu Pro):
   vim                             2:7.4.052-1ubuntu3.1+esm14
   vim-athena                      2:7.4.052-1ubuntu3.1+esm14
   vim-gtk                         2:7.4.052-1ubuntu3.1+esm14
   vim-nox                         2:7.4.052-1ubuntu3.1+esm14
   vim-tiny                        2:7.4.052-1ubuntu3.1+esm14

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-6452-1

  CVE-2023-3896, CVE-2023-4733, CVE-2023-4734, CVE-2023-4735,

  CVE-2023-4738, CVE-2023-4750, CVE-2023-4751, CVE-2023-4752,

  CVE-2023-4781, CVE-2023-5344, CVE-2023-5441, CVE-2023-5535

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6452-1

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu memory management vim out of bounds arithmetic overflow

Package Information

  https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1
  https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2
  https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13
  https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here