CVE-2023-1175

Published: Mar 4, 2023Modified: Sep 18, 2026

6.6

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Exploitability: 1.8 / Impact: 4.7

Source: NVD

Description

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

Affected (7)

Products: Debian: Debian Linux · Fedoraproject: Fedora · Neovim: Neovim · +1 more

Show all products

Debian: Debian Linux · Fedoraproject: Fedora · Neovim: Neovim · Vim: Vim

1 product

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 36
Fedoraproject Fedora	Version 37
Fedoraproject Fedora	Version 38

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Neovim Neovim	version ≤ 0.8.3

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Vim Vim	version < 9.0.1378

Related CWEs

Incorrect Calculation of Buffer Size

The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

References (13)

https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba

Source: security@huntr.dev

Patch

https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e

Source: security@huntr.dev

ExploitPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.