Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-2426 Details

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CNA: [email protected]CVSS-B:6.8 MEDIUMVector:CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b	CVE	Patch
https://huntr.dev/bounties/3451be4c-91c8-4d08-926b-cbff7396f425	CVE	Exploit
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LOJP6M7ZTKZQYOGVOOAY6TIE6ACBJL55/	CVE	Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/	CVE	Mailing ListThird Party Advisory
https://support.apple.com/kb/HT213844	CVE	Third Party Advisory
https://support.apple.com/kb/HT213845	CVE	Third Party Advisory
https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b	[email protected]	Patch
https://huntr.dev/bounties/3451be4c-91c8-4d08-926b-cbff7396f425	[email protected]	Exploit
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LOJP6M7ZTKZQYOGVOOAY6TIE6ACBJL55/	[email protected]	Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/	[email protected]	Mailing ListThird Party Advisory
https://support.apple.com/kb/HT213844	[email protected]	Third Party Advisory
https://support.apple.com/kb/HT213845	[email protected]	Third Party Advisory

CWE-ID	CWE Name	Source
CWE-823	Use of Out-of-range Pointer Offset	[email protected]
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Product	Versions
fedoraproject fedora	37 38
CPE cpe:2.3:o:fedoraproject:fedora:37:::::::* cpe:2.3:o:fedoraproject:fedora:38:::::::* Remediation No remediation found in references.
apple macos	11.7.9 12.6.8
CPE cpe:2.3:o:apple:macos:11.7.9:::::::* cpe:2.3:o:apple:macos:12.6.8:::::::* Remediation No remediation found in references.
neovim neovim	>= 0.7.0, < 0.10.0
CPE cpe:2.3:a:neovim:neovim:::::::: Remediation No remediation found in references.
vim vim	< 9.0.1499
CPE cpe:2.3:a:vim:vim:::::::: Remediation No remediation found in references.

10 change records found show changes

QUICK INFO