CVE-2023-5344

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.(CVE-2023-5344)

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

• SECURITY UPDATE: a fix of buffer-overflow in trunc_string()
  • debian/patches/CVE-2023-5344.patch
  • CVE-2023-5344
• SECURITY UPDATE: segfault in exmode
  • debian/patches/CVE-2023-5441.patch
  • CVE-2023-5441

• CVE-2023-5441: segfault in exmode
• CVE-2023-5344: buffer overflow in trunc_string()

• CVE-2023-5441: segfault in exmode
• CVE-2023-5344: buffer overflow in trunc_string()

• CVE-2023-0054: check the return value of vim_regsub()
• CVE-2023-0049: avoid going over the NUL at the end
• CVE-2023-0288: prevent the cursor from moving to line zero
• CVE-2023-0433: check for not going over the end of the line
• CVE-2023-2610: limit the text length to MAXCOL
• CVE-2023-4750: check buffer is valid before accessing it
• CVE-2023-4733: verify oldwin pointer after reset_VIsual()
• CVE-2023-4751: stop Visual mode when using :ball
• CVE-2023-5344: add NULL at end of buffer
• CVE-2024-22667: pass size of errbuf down the call stack, use snprintf()

• CVE-2023-4751: fix illegal memory access when using :ball
• CVE-2023-4734: fix crash caused by int overflow
• CVE-2023-5344: fix buffer overflow
• CVE-2023-5535: fix use after free

This update for vim fixes the following issues:

Updated to version 9.0 with patch level 2103, fixes the following security problems

• CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940)
• CVE-2023-5441: vim: segfault in exmode when redrawing (bsc#1216001)
• CVE-2023-5535: vim: use-after-free from buf_contents_changed() (bsc#1216167)
• CVE-2023-46246: vim: Integer Overflow in :history command (bsc#1216696)
• CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both (bsc#1214922)
• CVE-2023-4735: vim: OOB Write ops.c (bsc#1214924)
• CVE-2023-4734: vim: segmentation fault in function f_fullcommand (bsc#1214925)
• CVE-2023-4733: vim: use-after-free in function buflist_altfpos (bsc#1215004)
• CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp (bsc#1215006)
• CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both (bsc#1215033)

This update for vim fixes the following issues:

• CVE-2023-5344: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940)
• CVE-2023-5441: segfault in exmode when redrawing (bsc#1216001)
• CVE-2023-5535: use-after-free from buf_contents_changed() (bsc#1216167)
• CVE-2023-46246: Integer Overflow in :history command (bsc#1216696)

This update for vim fixes the following issues:

• CVE-2023-5344: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940)
• CVE-2023-5441: segfault in exmode when redrawing (bsc#1216001)
• CVE-2023-5535: use-after-free from buf_contents_changed() (bsc#1216167)
• CVE-2023-46246: Integer Overflow in :history command (bsc#1216696)

It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04. (CVE-2023-3896)

It was discovered that Vim did not properly manage memory. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-4733, CVE-2023-4750)

It was discovered that Vim contained an arithmetic overflow. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4734)

It was discovered that Vim could be made to write out of bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-4735, CVE-2023-5344)

It was discovered that Vim could be made to write out of bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-4738)

It was discovered that Vim could be made to write out of bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-4751)

It was discovered that Vim did not properly manage memory. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4752, CVE-2023-5535)

It was discovered that Vim could be made to write out of bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4781)

It was discovered that Vim could be made to dereference invalid memory. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-5441)