First published: Thu Oct 05 2023(Updated: )
NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.
Credit: security@huntr.dev security@huntr.dev security@huntr.dev
Affected Software | Affected Version | How to fix |
---|---|---|
Vim Vim | <9.0.1994 | |
Fedoraproject Fedora | =37 | |
Fedoraproject Fedora | =38 | |
Fedoraproject Fedora | =39 | |
ubuntu/vim | <2:8.0.1453-1ubuntu1.13+ | 2:8.0.1453-1ubuntu1.13+ |
ubuntu/vim | <2:8.1.2269-1ubuntu5.20 | 2:8.1.2269-1ubuntu5.20 |
ubuntu/vim | <2:8.2.3995-1ubuntu2.13 | 2:8.2.3995-1ubuntu2.13 |
ubuntu/vim | <2:9.0.1000-4ubuntu3.2 | 2:9.0.1000-4ubuntu3.2 |
ubuntu/vim | <2:9.0.1672-1ubuntu2.1 | 2:9.0.1672-1ubuntu2.1 |
ubuntu/vim | <2:7.4.052-1ubuntu3.1+ | 2:7.4.052-1ubuntu3.1+ |
ubuntu/vim | <2:7.4.1689-3ubuntu1.5+ | 2:7.4.1689-3ubuntu1.5+ |
debian/vim | <=2:8.1.0875-5+deb10u2<=2:8.1.0875-5+deb10u6<=2:8.2.2434-3+deb11u1<=2:9.0.1378-2 | 2:9.1.0016-1 2:9.1.0377-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-5441 is a vulnerability in the GitHub repository vim/vim that allows NULL pointer dereference, affecting Vim versions up to and excluding 9.0.1994.
CVE-2023-5441 has a severity score of 8.2, which is classified as high.
CVE-2023-5441 affects Vim versions prior to 9.0.1994, causing a NULL pointer dereference vulnerability.
Yes, the fix for CVE-2023-5441 is available in the GitHub commit 20d161ace307e28690229b68584f2d84556f8960.
You can find more information about CVE-2023-5441 in the following references: [GitHub Commit](https://github.com/vim/vim/commit/20d161ace307e28690229b68584f2d84556f8960) and [Huntr Dev](https://huntr.dev/bounties/b54cbdf5-3e85-458d-bb38-9ea2c0b669f2).