First published: Mon Oct 02 2023(Updated: )
Accessibility. A privacy issue was addressed with improved private data redaction for log entries.
Credit: CVE-2023-5344 security@huntr.dev Ivan Fratric Google Project Zero Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeMickey Jin @patch1t an anonymous researcher Marc Newlin SkySafeKoh M. Nakagawa @tsunek0h CVE-2023-38545 CVE-2023-38039 CVE-2023-38546 Yann GASCUEL Alter SolutionsAnthony Cruz Tyrant Corp @App Wojciech Regula SecuRingZhenjiang Zhao Pangu TeamQianxin Junsung Lee Meysam Firouzi @R00tkitSMM Pan ZhenPeng @Peterpan0927 STAR Labs SG PteEloi Benoist-Vanderbeken @elvanderb SynacktivCVE-2023-42893 CVE-2023-3618 CVE-2020-19185 CVE-2020-19186 CVE-2020-19187 CVE-2020-19188 CVE-2020-19189 CVE-2020-19190 Ron Masas BreakPointCsaba Fitzl @theevilbit OffSecCsaba Fitzl @theevilbit Offensive SecurityArsenii Kostromin (0x3c3e) Mattie Behrens Joshua Jewett @JoshJewett33 Zhongquan Li @Guluisacat Zhongquan Li @Guluisacat Dawn Security Lab of JingDongPwn2car Zoom Offensive Security Team Nan Wang @eternalsakura13 360 Vulnerability Research Instituterushikesh nandedkar SungKwon Lee (Demon.Team) Kirin @Pwnrin Noah Roskin-Frazee Pr Don Clarke Yiğit Can YILMAZ @yilmazcanyigit Offensive Security Offensive SecurityYiğit Can YILMAZ @yilmazcanyigit Jewel Lambert Zhipeng Huo @R3dF09 Tencent Security Xuanwu Lab
Affected Software | Affected Version | How to fix |
---|---|---|
debian/vim | <=2:8.2.2434-3+deb11u1<=2:9.0.1378-2 | 2:9.1.0496-1 2:9.1.0709-1 |
Apple macOS | <14.2 | 14.2 |
macOS | <12.7.2 | 12.7.2 |
macOS Ventura | <13.6.3 | 13.6.3 |
SUSE Vim | <9.0.1969 | |
Red Hat Fedora | =37 | |
Red Hat Fedora | =38 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The vulnerability ID of this issue is CVE-2023-5344.
The severity of CVE-2023-5344 is high.
Versions of Vim prior to 9.0.1969 are affected by CVE-2023-5344.
To fix CVE-2023-5344, update Vim to version 9.0.1969 or later.
CVE-2023-5344 is a heap-based buffer overflow vulnerability in the GitHub repository vim/vim.