First published: Mon Sep 04 2023(Updated: )
Vim. A use-after-free issue was addressed with improved memory management.
Credit: CVE-2023-4733 CVE-2023-4734 CVE-2023-4735 CVE-2023-4736 CVE-2023-4738 CVE-2023-4750 CVE-2023-4751 CVE-2023-4752 CVE-2023-4781 security@huntr.dev security@huntr.dev security@huntr.dev
Affected Software | Affected Version | How to fix |
---|---|---|
Vim Vim | <9.0.1840 | |
Fedoraproject Fedora | =37 | |
Fedoraproject Fedora | =38 | |
Fedoraproject Fedora | =39 | |
Apple macOS | <14.1 | |
ubuntu/vim | <2:8.0.1453-1ubuntu1.13+ | 2:8.0.1453-1ubuntu1.13+ |
ubuntu/vim | <2:8.1.2269-1ubuntu5.20 | 2:8.1.2269-1ubuntu5.20 |
ubuntu/vim | <2:8.2.3995-1ubuntu2.13 | 2:8.2.3995-1ubuntu2.13 |
ubuntu/vim | <2:9.0.1000-4ubuntu3.2 | 2:9.0.1000-4ubuntu3.2 |
ubuntu/vim | <2:9.0.1672-1ubuntu2.1 | 2:9.0.1672-1ubuntu2.1 |
ubuntu/vim | <2:7.4.052-1ubuntu3.1+ | 2:7.4.052-1ubuntu3.1+ |
ubuntu/vim | <2:7.4.1689-3ubuntu1.5+ | 2:7.4.1689-3ubuntu1.5+ |
Apple macOS Sonoma | <14.1 | 14.1 |
debian/vim | <=2:8.1.0875-5+deb10u2<=2:8.1.0875-5+deb10u6<=2:8.2.2434-3+deb11u1<=2:9.0.1378-2 | 2:9.1.0016-1 2:9.1.0377-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-4733 is a vulnerability that allows an attacker to exploit a use-after-free vulnerability in the GitHub repository vim/vim prior to version 9.0.1840.
CVE-2023-4733 affects Vim versions prior to 9.0.1840 and Fedora version 38.
CVE-2023-4733 has a severity rating of 7.3, which is considered high.
To fix CVE-2023-4733, you should update your Vim software to version 9.0.1840 or later.
You can find more information about CVE-2023-4733 in the references provided: [link1](https://github.com/vim/vim/commit/e1dc9a627536304bc4f738c21e909ad9fcf3974c), [link2](https://huntr.dev/bounties/1ce1fd8c-050a-4373-8004-b35b61590217), [link3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I56ITJAFMFAQ2G3BMGTCGM3GS62V2DTR/)