UBUNTU-CVE-2023-48235
- Source
- https://ubuntu.com/security/CVE-2023-48235
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48235.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2023-48235
- Related
- Published
- 2023-11-16T23:15:00Z
- Modified
- 2025-06-02T17:22:38Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
- 2.8 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- [none]
- Details
-
Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONG_MAX - lnum will cause the overflow. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit
060623ewhich has been included in release version 9.0.2110. Users are advised to upgrade. There are no known workarounds for this vulnerability. - References
-
- https://ubuntu.com/security/CVE-2023-48235
- https://github.com/vim/vim/security/advisories/GHSA-6g74-hr6q-pr8g
- https://github.com/vim/vim/commit/060623e4a3bc72b011e7cd92bedb3bfb64e06200
- http://www.openwall.com/lists/oss-security/2023/11/16/1
- https://ubuntu.com/security/notices/USN-6557-1
- https://www.cve.org/CVERecord?id=CVE-2023-48235
Affected packages
Ubuntu:Pro:14.04:LTS / vim
Package
- Name
- vim
- Purl
- pkg:deb/ubuntu/vim@2:7.4.052-1ubuntu3.1+esm15?arch=source&distro=trusty/esm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2:7.4.052-1ubuntu3.1+esm15
Affected versions
2:7.*
2:7.4.000-1ubuntu2
2:7.4.052-1ubuntu1
2:7.4.052-1ubuntu2
2:7.4.052-1ubuntu3
2:7.4.052-1ubuntu3.1
2:7.4.052-1ubuntu3.1+esm1
2:7.4.052-1ubuntu3.1+esm3
2:7.4.052-1ubuntu3.1+esm4
2:7.4.052-1ubuntu3.1+esm5
2:7.4.052-1ubuntu3.1+esm6
2:7.4.052-1ubuntu3.1+esm7
2:7.4.052-1ubuntu3.1+esm8
2:7.4.052-1ubuntu3.1+esm9
2:7.4.052-1ubuntu3.1+esm10
2:7.4.052-1ubuntu3.1+esm11
2:7.4.052-1ubuntu3.1+esm12
2:7.4.052-1ubuntu3.1+esm13
2:7.4.052-1ubuntu3.1+esm14
Ecosystem specific
{
"priority_reason": "Requires user interaction",
"binaries": [
{
"binary_name": "vim",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-athena",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-athena-dbgsym",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-common",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-common-dbgsym",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-dbg",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-dbgsym",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-doc",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-gnome",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-gnome-dbgsym",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-gtk",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-gtk-dbgsym",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-gui-common",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-lesstif",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-nox",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-nox-dbgsym",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-runtime",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-tiny",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
},
{
"binary_name": "vim-tiny-dbgsym",
"binary_version": "2:7.4.052-1ubuntu3.1+esm15"
}
],
"ubuntu_priority": "low",
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
Ubuntu:Pro:16.04:LTS / vim
Package
- Name
- vim
- Purl
- pkg:deb/ubuntu/vim@2:7.4.1689-3ubuntu1.5+esm22?arch=source&distro=esm-infra/xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2:7.4.1689-3ubuntu1.5+esm22
Affected versions
2:7.*
2:7.4.712-2ubuntu4
2:7.4.826-1ubuntu1
2:7.4.826-1ubuntu2
2:7.4.826-1ubuntu3
2:7.4.963-1ubuntu1
2:7.4.963-1ubuntu4
2:7.4.963-1ubuntu5
2:7.4.1689-3ubuntu1
2:7.4.1689-3ubuntu1.1
2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.3
2:7.4.1689-3ubuntu1.4
2:7.4.1689-3ubuntu1.5
2:7.4.1689-3ubuntu1.5+esm2
2:7.4.1689-3ubuntu1.5+esm3
2:7.4.1689-3ubuntu1.5+esm4
2:7.4.1689-3ubuntu1.5+esm5
2:7.4.1689-3ubuntu1.5+esm6
2:7.4.1689-3ubuntu1.5+esm7
2:7.4.1689-3ubuntu1.5+esm8
2:7.4.1689-3ubuntu1.5+esm10
2:7.4.1689-3ubuntu1.5+esm11
2:7.4.1689-3ubuntu1.5+esm12
2:7.4.1689-3ubuntu1.5+esm13
2:7.4.1689-3ubuntu1.5+esm14
2:7.4.1689-3ubuntu1.5+esm15
2:7.4.1689-3ubuntu1.5+esm17
2:7.4.1689-3ubuntu1.5+esm18
2:7.4.1689-3ubuntu1.5+esm19
2:7.4.1689-3ubuntu1.5+esm20
Ecosystem specific
{
"priority_reason": "Requires user interaction",
"binaries": [
{
"binary_name": "vim",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-athena",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-athena-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-athena-py2",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-athena-py2-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-common",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-common-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-doc",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gnome",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gnome-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gnome-py2",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gnome-py2-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gtk",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gtk-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gtk-py2",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gtk-py2-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gtk3",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gtk3-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gtk3-py2",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gtk3-py2-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-gui-common",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-nox",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-nox-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-nox-py2",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-nox-py2-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-runtime",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-tiny",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
},
{
"binary_name": "vim-tiny-dbgsym",
"binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
}
],
"ubuntu_priority": "low",
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
Ubuntu:Pro:18.04:LTS / vim
Package
- Name
- vim
- Purl
- pkg:deb/ubuntu/vim@2:8.0.1453-1ubuntu1.13+esm7?arch=source&distro=esm-infra/bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2:8.0.1453-1ubuntu1.13+esm7
Affected versions
2:8.*
2:8.0.0197-4ubuntu5
2:8.0.1144-1ubuntu1
2:8.0.1401-1ubuntu1
2:8.0.1401-1ubuntu2
2:8.0.1401-1ubuntu3
2:8.0.1453-1ubuntu1
2:8.0.1453-1ubuntu1.1
2:8.0.1453-1ubuntu1.3
2:8.0.1453-1ubuntu1.4
2:8.0.1453-1ubuntu1.6
2:8.0.1453-1ubuntu1.7
2:8.0.1453-1ubuntu1.8
2:8.0.1453-1ubuntu1.9
2:8.0.1453-1ubuntu1.10
2:8.0.1453-1ubuntu1.11
2:8.0.1453-1ubuntu1.12
2:8.0.1453-1ubuntu1.13
2:8.0.1453-1ubuntu1.13+esm1
2:8.0.1453-1ubuntu1.13+esm3
2:8.0.1453-1ubuntu1.13+esm4
2:8.0.1453-1ubuntu1.13+esm5
2:8.0.1453-1ubuntu1.13+esm6
Ecosystem specific
{
"priority_reason": "Requires user interaction",
"binaries": [
{
"binary_name": "vim",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-athena",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-athena-dbgsym",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-common",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-dbgsym",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-doc",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-gnome",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-gtk",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-gtk-dbgsym",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-gtk3",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-gtk3-dbgsym",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-gui-common",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-nox",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-nox-dbgsym",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-runtime",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-tiny",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "vim-tiny-dbgsym",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "xxd",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
},
{
"binary_name": "xxd-dbgsym",
"binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
}
],
"ubuntu_priority": "low",
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
Ubuntu:20.04:LTS / vim
Package
- Name
- vim
- Purl
- pkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5.21?arch=source&distro=focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2:8.1.2269-1ubuntu5.21
Affected versions
2:8.*
2:8.1.0875-5ubuntu2
2:8.1.0875-5ubuntu3
2:8.1.0875-5ubuntu4
2:8.1.2269-1ubuntu1
2:8.1.2269-1ubuntu4
2:8.1.2269-1ubuntu5
2:8.1.2269-1ubuntu5.3
2:8.1.2269-1ubuntu5.4
2:8.1.2269-1ubuntu5.6
2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.8
2:8.1.2269-1ubuntu5.9
2:8.1.2269-1ubuntu5.11
2:8.1.2269-1ubuntu5.12
2:8.1.2269-1ubuntu5.13
2:8.1.2269-1ubuntu5.14
2:8.1.2269-1ubuntu5.15
2:8.1.2269-1ubuntu5.16
2:8.1.2269-1ubuntu5.17
2:8.1.2269-1ubuntu5.18
2:8.1.2269-1ubuntu5.20
Ecosystem specific
{
"priority_reason": "Requires user interaction",
"binaries": [
{
"binary_name": "vim",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-athena",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-athena-dbgsym",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-common",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-dbgsym",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-doc",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-gtk",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-gtk3",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-gtk3-dbgsym",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-gui-common",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-nox",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-nox-dbgsym",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-runtime",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-tiny",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "vim-tiny-dbgsym",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "xxd",
"binary_version": "2:8.1.2269-1ubuntu5.21"
},
{
"binary_name": "xxd-dbgsym",
"binary_version": "2:8.1.2269-1ubuntu5.21"
}
],
"ubuntu_priority": "low",
"availability": "No subscription required"
}
Ubuntu:22.04:LTS / vim
Package
- Name
- vim
- Purl
- pkg:deb/ubuntu/vim@2:8.2.3995-1ubuntu2.15?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2:8.2.3995-1ubuntu2.15
Affected versions
2:8.*
2:8.2.2434-3ubuntu3
2:8.2.2434-3ubuntu4
2:8.2.3565-1ubuntu1
2:8.2.3565-1ubuntu2
2:8.2.3565-1ubuntu3
2:8.2.3565-1ubuntu5
2:8.2.3995-1ubuntu1
2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.1
2:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.4
2:8.2.3995-1ubuntu2.5
2:8.2.3995-1ubuntu2.7
2:8.2.3995-1ubuntu2.8
2:8.2.3995-1ubuntu2.9
2:8.2.3995-1ubuntu2.10
2:8.2.3995-1ubuntu2.11
2:8.2.3995-1ubuntu2.12
2:8.2.3995-1ubuntu2.13
Ecosystem specific
{
"priority_reason": "Requires user interaction",
"binaries": [
{
"binary_name": "vim",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-athena",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-athena-dbgsym",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-common",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-dbgsym",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-doc",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-gtk",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-gtk3",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-gtk3-dbgsym",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-gui-common",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-nox",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-nox-dbgsym",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-runtime",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-tiny",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "vim-tiny-dbgsym",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "xxd",
"binary_version": "2:8.2.3995-1ubuntu2.15"
},
{
"binary_name": "xxd-dbgsym",
"binary_version": "2:8.2.3995-1ubuntu2.15"
}
],
"ubuntu_priority": "low",
"availability": "No subscription required"
}