CVE-2023-48706: Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite
Last updated 24 July 2024
Other sources
Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later then be accessed by the initial :s command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it seems to work only reliably for the very first :s command. It may also cause a crash of Vim. Version 9.0.2121 contains a fix for this issue.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.1.1230-1 - Upgrade
Upgrade
SUSE Vimto a version that resolves this vulnerability.Fixed in 9.0.2121
Event History
Frequently Asked Questions
What is the vulnerability ID for this Vim vulnerability?
The vulnerability ID for this Vim vulnerability is CVE-2023-48706.
What is the severity rating of CVE-2023-48706?
The severity rating of CVE-2023-48706 is medium.
What is the affected software for CVE-2023-48706?
The affected software for CVE-2023-48706 is Vim version up to exclusive 9.0.2121.
What is the CWE ID for CVE-2023-48706?
The CWE ID for CVE-2023-48706 is CWE-416.
How do I fix CVE-2023-48706?
To fix CVE-2023-48706, upgrade Vim to version 9.0.2121 or higher.