CVE-2023-48706: Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite
Last updated 24 July 2024
Other sources
Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later then be accessed by the initial :s command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it seems to work only reliably for the very first :s command. It may also cause a crash of Vim. Version 9.0.2121 contains a fix for this issue.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.1.1230-1 - Upgrade
Upgrade
Vimto a version that resolves this vulnerability.Fixed in 9.0.2121 - Operational
After upgrading to Vim 9.0.2121, restart any affected Vim sessions to ensure the fixed binary is used.
Event History
Frequently Asked Questions
What is the vulnerability ID for this Vim vulnerability?
The vulnerability ID for this Vim vulnerability is CVE-2023-48706.
What is the severity rating of CVE-2023-48706?
The severity rating of CVE-2023-48706 is medium.
What is the affected software for CVE-2023-48706?
The affected software for CVE-2023-48706 is Vim version up to exclusive 9.0.2121.
What is the CWE ID for CVE-2023-48706?
The CWE ID for CVE-2023-48706 is CWE-416.
How do I fix CVE-2023-48706?
To fix CVE-2023-48706, upgrade Vim to version 9.0.2121 or higher.