CVE-2023-0288
Heap-based Buffer Overflow in vim/vim
7.3 HighFix available
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.50%Down 0.4 points since Jan 14, 2023
What each source reports
CVE List Score used
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
CVE-2023-0288- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
EUVDEUVD-2023-12366
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
EUVD-2023-12366- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vr7q-737x-h8wj
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
GHSA-vr7q-737x-h8wj- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
NVD
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
CVE-2023-0288- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-0288
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
ALPINE-CVE-2023-0288- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-12990
CVE-2023-0288 affecting package vim for versions less than 9.0.1189-1
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
AZL-12990- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 12 moreShow less
OSVBELL-CVE-2023-0288
- Record
BELL-CVE-2023-0288- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
CVE-2023-0288- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-0288
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
DEBIAN-CVE-2023-0288- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1061
vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.
Security Fix(es):
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.(CVE-2023-0288)
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.(CVE-2022-47024)
- Record
OESA-2023-1061- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-0288
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Record
UBUNTU-CVE-2023-0288- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2023-1699467659 No score
Fix CVE(s): CVE-2023-0288, CVE-2023-0054
- SECURITY UPDATE: a heap-based overflow
- debian/patches/CVE-2023-0288.patch: prevent the cursor from moving to line zero
- CVE-2023-0288
- SECURITY UPDATE: an out-of-bounds write
- debian/patches/CVE-2023-0054.patch: check the return value of vim_regsub()
- CVE-2023-0054
- Record
CLSA-2023-1699467659- Updated
- 2026-11-02
OSVCLSA-2024-1720776957 No score
vim: Fix of 10 CVEs
- CVE-2023-0054: check the return value of vim_regsub()
- CVE-2023-0049: avoid going over the NUL at the end
- CVE-2023-0288: prevent the cursor from moving to line zero
- CVE-2023-0433: check for not going over the end of the line
- CVE-2023-2610: limit the text length to MAXCOL
- CVE-2023-4750: check buffer is valid before accessing it
- CVE-2023-4733: verify oldwin pointer after reset_VIsual()
- CVE-2023-4751: stop Visual mode when using :ball
- CVE-2023-5344: add NULL at end of buffer
- CVE-2024-22667: pass size of errbuf down the call stack, use snprintf()
- Record
CLSA-2024-1720776957- Updated
- 2026-11-02
OSVCLSA-2025-1737024983 No score
vim: Fix of CVE-2023-0288
- CVE-2023-0288: prevent the cursor from moving to line zero to fix invalid memory access with folding and using "L"
- Record
CLSA-2025-1737024983- Updated
- 2026-11-02
OSVSUSE-SU-2023:0209-1 No score
Security update for vim
This update for vim fixes the following issues:
- Updated to version 9.0.1234:
- CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash (bsc#1207396).
- CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash (bsc#1207162).
- CVE-2023-0054: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1206868).
- CVE-2023-0051: Fixed an out of bounds memory access that could cause a crash (bsc#1206867).
- CVE-2023-0049: Fixed an out of bounds memory access that could cause a crash (bsc#1206866).
- CVE-2022-3491: Fixed an out of bounds memory access that could cause a crash (bsc#1206028).
- CVE-2022-3520: Fixed an out of bounds memory access that could cause a crash (bsc#1206071).
- CVE-2022-3591: Fixed a use-after-free issue that could cause memory corruption or undefined behavior (bsc#1206072).
- CVE-2022-4292: Fixed a use-after-free issue that could cause memory corruption or undefined behavior (bsc#1206075).
- CVE-2022-4293: Fixed a floating point exception that could cause a crash (bsc#1206077).
- CVE-2022-4141: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1205797).
- CVE-2022-3705: Fixed an use-after-free issue that could cause a crash or memory corruption (bsc#1204779).
- Record
SUSE-SU-2023:0209-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0211-1 No score
Security update for vim
This update for vim fixes the following issues:
- Updated to version 9.0.1234:
- CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash (bsc#1207396).
- CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash (bsc#1207162).
- CVE-2023-0054: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1206868).
- CVE-2023-0051: Fixed an out of bounds memory access that could cause a crash (bsc#1206867).
- CVE-2023-0049: Fixed an out of bounds memory access that could cause a crash (bsc#1206866).
- Record
SUSE-SU-2023:0211-1- Updated
- 2026-11-02
OSVUSN-5836-1 No score
vim vulnerabilities
It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
- Record
USN-5836-1- Updated
- 2026-11-02
OSVUSN-5963-1 No score
vim vulnerabilities
It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-47024, CVE-2023-0049, CVE-2023-0054, CVE-2023-0288, CVE-2023-0433)
It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 22.04
LTS, and Ubuntu 22.10. (CVE-2023-0051)
It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. (CVE-2023-1170, CVE-2023-1175)
It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 20.04
LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-1264)
- Record
USN-5963-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vimAlpine:v3.18 |
before 9.0.1198-r0 | 9.0.1198-r0 |
vimAlpine:v3.19 |
before 9.0.1198-r0 | 9.0.1198-r0 |
vimAlpine:v3.20 |
before 9.0.1198-r0 | 9.0.1198-r0 |
vimAlpine:v3.21 |
before 9.0.1198-r0 | 9.0.1198-r0 |
vimAlpine:v3.22 |
before 9.0.1198-r0 | 9.0.1198-r0 |
vimAlpine:v3.23 |
before 9.0.1198-r0 | 9.0.1198-r0 |
vimAlpine:v3.24 |
before 9.0.1198-r0 | 9.0.1198-r0 |
vimAzure Linux:2 |
before 9.0.1189-1 | 9.0.1189-1 |
vimAlpaquita:23 |
9.0.0820-r2 up to 9.1.0936-r0 | 9.1.0936-r0 |
vimTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
Show 60 moreShow less
| Package | Affected | Fixed |
|---|---|---|
vim-athenaTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-athena-py2TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-commonTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-docTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-gnomeTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-gnome-py2TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-gtkTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-gtk-py2TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-gtk3TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-gtk3-py2TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-gui-commonTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-noxTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-nox-py2TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-runtimeTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-tinyTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els48 | 3:7.4.1689-3ubuntu1.5+tuxcare.els48 |
vim-X11TuxCare:CentOS:7 From an advisory covering 10 CVEs |
before 2:7.4.629-8.el7_9.tuxcare.els1 | 2:7.4.629-8.el7_9.tuxcare.els1 |
vim-commonTuxCare:CentOS:7 From an advisory covering 10 CVEs |
before 2:7.4.629-8.el7_9.tuxcare.els1 | 2:7.4.629-8.el7_9.tuxcare.els1 |
vim-enhancedTuxCare:CentOS:7 From an advisory covering 10 CVEs |
before 2:7.4.629-8.el7_9.tuxcare.els1 | 2:7.4.629-8.el7_9.tuxcare.els1 |
vim-filesystemTuxCare:CentOS:7 From an advisory covering 10 CVEs |
before 2:7.4.629-8.el7_9.tuxcare.els1 | 2:7.4.629-8.el7_9.tuxcare.els1 |
vim-minimalTuxCare:CentOS:7 From an advisory covering 10 CVEs |
before 2:7.4.629-8.el7_9.tuxcare.els1 | 2:7.4.629-8.el7_9.tuxcare.els1 |
vim-X11TuxCare:AlmaLinux:9.2 |
before 2:8.2.2637-20.el9_1.tuxcare.els2 | 2:8.2.2637-20.el9_1.tuxcare.els2 |
vim-commonTuxCare:AlmaLinux:9.2 |
before 2:8.2.2637-20.el9_1.tuxcare.els2 | 2:8.2.2637-20.el9_1.tuxcare.els2 |
vim-enhancedTuxCare:AlmaLinux:9.2 |
before 2:8.2.2637-20.el9_1.tuxcare.els2 | 2:8.2.2637-20.el9_1.tuxcare.els2 |
vim-filesystemTuxCare:AlmaLinux:9.2 |
before 2:8.2.2637-20.el9_1.tuxcare.els2 | 2:8.2.2637-20.el9_1.tuxcare.els2 |
vim-minimalTuxCare:AlmaLinux:9.2 |
before 2:8.2.2637-20.el9_1.tuxcare.els2 | 2:8.2.2637-20.el9_1.tuxcare.els2 |
vimDebian:12 |
before 2:9.0.1378-1 | 2:9.0.1378-1 |
vimDebian:13 |
before 2:9.0.1378-1 | 2:9.0.1378-1 |
vimDebian:14 |
before 2:9.0.1378-1 | 2:9.0.1378-1 |
vimopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 9.0-7.oe1 | 9.0-7.oe1 |
vimopenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 9.0-7.oe1 | 9.0-7.oe1 |
vimopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 9.0-8.oe2203sp1 | 9.0-8.oe2203sp1 |
vimopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 9.0-8.oe2203sp1 | 9.0-8.oe2203sp1 |
vimSUSE:OpenStack Cloud 9 From an advisory covering 12 CVEs |
before 9.0.1234-17.12.1 | 9.0.1234-17.12.1 |
vimSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 12 CVEs |
before 9.0.1234-17.12.1 | 9.0.1234-17.12.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 12 CVEs |
before 9.0.1234-17.12.1 | 9.0.1234-17.12.1 |
vimSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 12 CVEs |
before 9.0.1234-17.12.1 | 9.0.1234-17.12.1 |
vimSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 12 CVEs |
before 9.0.1234-17.12.1 | 9.0.1234-17.12.1 |
vimSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 12 CVEs |
before 9.0.1234-17.12.1 | 9.0.1234-17.12.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 12 CVEs |
before 9.0.1234-17.12.1 | 9.0.1234-17.12.1 |
vimSUSE:Linux Enterprise Micro 5.3 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimSUSE:Linux Enterprise Micro 5.1 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimSUSE:Linux Enterprise Micro 5.2 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimopenSUSE:Leap Micro 5.2 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimopenSUSE:Leap Micro 5.3 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimopenSUSE:Leap 15.4 From an advisory covering 5 CVEs |
before 9.0.1234-150000.5.34.1 | 9.0.1234-150000.5.34.1 |
vimUbuntu:Pro:14.04:LTS |
before 2:7.4.052-1ubuntu3.1+esm6, plus listed versions 2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1 Show 4 moreShow less2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm5 |
2:7.4.052-1ubuntu3.1+esm6 |
vimUbuntu:Pro:16.04:LTS |
before 2:7.4.1689-3ubuntu1.5+esm15, plus listed versions 2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1 Show 20 moreShow less2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm14 |
2:7.4.1689-3ubuntu1.5+esm15 |
vimUbuntu:18.04:LTS |
before 2:8.0.1453-1ubuntu1.11, plus listed versions 2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3 Show 9 moreShow less2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.10 |
2:8.0.1453-1ubuntu1.11 |
vimUbuntu:20.04:LTS |
before 2:8.1.2269-1ubuntu5.12, plus listed versions 2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4 Show 8 moreShow less2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.11 |
2:8.1.2269-1ubuntu5.12 |
vimUbuntu:22.04:LTS |
before 2:8.2.3995-1ubuntu2.4, plus listed versions 2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3 Show 5 moreShow less2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.3 |
2:8.2.3995-1ubuntu2.4 |
vimUbuntu:Pro:14.04:LTS From an advisory covering 5 CVEs |
before 2:7.4.052-1ubuntu3.1+esm6, plus listed versions 2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1 Show 4 moreShow less2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm5 |
2:7.4.052-1ubuntu3.1+esm6 |
vimUbuntu:Pro:16.04:LTS From an advisory covering 5 CVEs |
before 2:7.4.1689-3ubuntu1.5+esm15, plus listed versions 2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1 Show 20 moreShow less2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm14 |
2:7.4.1689-3ubuntu1.5+esm15 |
vimUbuntu:Pro:14.04:LTS From an advisory covering 9 CVEs |
before 2:7.4.052-1ubuntu3.1+esm7, plus listed versions 2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1 Show 5 moreShow less2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm52:7.4.052-1ubuntu3.1+esm6 |
2:7.4.052-1ubuntu3.1+esm7 |
vimUbuntu:Pro:16.04:LTS From an advisory covering 9 CVEs |
before 2:7.4.1689-3ubuntu1.5+esm17, plus listed versions 2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1 Show 21 moreShow less2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm142:7.4.1689-3ubuntu1.5+esm15 |
2:7.4.1689-3ubuntu1.5+esm17 |
vimUbuntu:18.04:LTS From an advisory covering 9 CVEs |
before 2:8.0.1453-1ubuntu1.11, plus listed versions 2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3 Show 9 moreShow less2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.10 |
2:8.0.1453-1ubuntu1.11 |
vimUbuntu:20.04:LTS From an advisory covering 9 CVEs |
before 2:8.1.2269-1ubuntu5.12, plus listed versions 2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4 Show 8 moreShow less2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.11 |
2:8.1.2269-1ubuntu5.12 |
vimUbuntu:22.04:LTS From an advisory covering 9 CVEs |
before 2:8.2.3995-1ubuntu2.4, plus listed versions 2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3 Show 5 moreShow less2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.3 |
2:8.2.3995-1ubuntu2.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-0288 is a high vulnerability (CVSS 7.3) in Vim, published January 13, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. Fixed in vim 9.0.1198-r0.
References
huntr.dev/bounties/550a0852-9be0-4abe-906c-f803b34e41d3
github.com/vim/vim/commit/232bdaaca98c34a99ffadf27bf6ee08be6cc8f6a
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYC22GGZ6QA66HLNLHCTAJU265TT3O33
support.apple.com/kb/HT213670
seclists.org/fulldisclosure/2023/Mar/17
nvd.nist.gov/vuln/detail/CVE-2023-0288
Show 49 moreShow less
security.alpinelinux.org/vuln/CVE-2023-0288
docs.bell-sw.com/security/cves/CVE-2023-0288
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1699467659
errata.tuxcare.com/centos7-els/CLSA-2024-1720776957.html
security-tracker.debian.org/tracker/CVE-2023-0288
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1061
suse.com/support/update/announcement/2023/suse-su-20230209-1
bugzilla.suse.com/1204779
ubuntu.com/security/CVE-2023-0288
cve.org/CVERecord?id=CVE-2023-0288