CVE-2023-1170
בינונית 6.6
תיאור (מקור, אנגלית)
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
מדדים
- CVSS 3.1
-
6.6 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-8/10/2026
- CWE
- CWE-122
מוצרים מושפעים
fedoraproject: fedora; neovim: neovim; vim: vim
קישורים
- https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c Patch
- https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4 ExploitPatchThird Party Advisory
- https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c Patch
- https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4 ExploitPatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap… Mailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap… Mailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap… Mailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap… Mailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap… Mailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap… Mailing ListThird Party Advisory