Every CVE Search/ Get API key

CVE-2023-0049

Out-of-bounds Read in vim/vim

7.3 HighFix available

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.58%Down 0.3 points since Jan 5, 2023
90%50%10%1%

What each source reports

CVE List Score used 7.3

Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
CVE-2023-0049
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2023-12152 7.3

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
EUVD-2023-12152
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3j5g-pgw8-92vr 7.8

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
GHSA-3j5g-pgw8-92vr
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 7.8

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
CVE-2023-0049
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2023-0049 7.8

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
ALPINE-CVE-2023-0049
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-12940 7.8

CVE-2023-0049 affecting package vim for versions less than 9.0.1145-1

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
AZL-12940
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 15 moreShow less
OSVBELL-CVE-2023-0049 7.8
Record
BELL-CVE-2023-0049
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.3

Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
CVE-2023-0049
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVDEBIAN-CVE-2023-0049 7.8

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
DEBIAN-CVE-2023-0049
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1026 7.3

vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.(CVE-2023-0049)

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.(CVE-2023-0051)

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.(CVE-2023-0054)

Record
OESA-2023-1026
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-0049 7.8

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Record
UBUNTU-CVE-2023-0049
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2023-1674813830 No score

vim: Fix of CVE-2023-0049

  • CVE-2023-0049: fix out-of-bounds read
Record
CLSA-2023-1674813830
Updated
2026-11-02
OSVCLSA-2023-1674814108 No score

vim: Fix of CVE-2023-0049

  • CVE-2023-0049: fix out-of-bounds read
Record
CLSA-2023-1674814108
Updated
2026-11-02
OSVCLSA-2023-1674814283 No score

Fix CVE(s): CVE-2023-0049

  • SECURITY UPDATE: Out-of-bounds read in function build_stl_str_hl
    • debian/patches/CVE-2023-0049: Stop reading from buffer at "%0"
    • CVE-2023-0049
Record
CLSA-2023-1674814283
Updated
2026-11-02
OSVCLSA-2024-1720776957 No score

vim: Fix of 10 CVEs

  • CVE-2023-0054: check the return value of vim_regsub()
  • CVE-2023-0049: avoid going over the NUL at the end
  • CVE-2023-0288: prevent the cursor from moving to line zero
  • CVE-2023-0433: check for not going over the end of the line
  • CVE-2023-2610: limit the text length to MAXCOL
  • CVE-2023-4750: check buffer is valid before accessing it
  • CVE-2023-4733: verify oldwin pointer after reset_VIsual()
  • CVE-2023-4751: stop Visual mode when using :ball
  • CVE-2023-5344: add NULL at end of buffer
  • CVE-2024-22667: pass size of errbuf down the call stack, use snprintf()
Record
CLSA-2024-1720776957
Updated
2026-11-02
OSVCLSA-2025-1737993483 No score

vim: Fix of CVE-2023-0049

  • CVE-2023-0049: fix invalid memory access with bad 'statusline' value
Record
CLSA-2025-1737993483
Updated
2026-11-02
OSVMGASA-2023-0021 No score

Updated vim packages fix security vulnerability

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. (CVE-2023-0049)

Record
MGASA-2023-0021
Updated
2026-11-02
OSVSUSE-SU-2023:0209-1 No score

Security update for vim

This update for vim fixes the following issues:

  • Updated to version 9.0.1234:
    • CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash (bsc#1207396).
    • CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash (bsc#1207162).
    • CVE-2023-0054: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1206868).
    • CVE-2023-0051: Fixed an out of bounds memory access that could cause a crash (bsc#1206867).
    • CVE-2023-0049: Fixed an out of bounds memory access that could cause a crash (bsc#1206866).
    • CVE-2022-3491: Fixed an out of bounds memory access that could cause a crash (bsc#1206028).
    • CVE-2022-3520: Fixed an out of bounds memory access that could cause a crash (bsc#1206071).
    • CVE-2022-3591: Fixed a use-after-free issue that could cause memory corruption or undefined behavior (bsc#1206072).
    • CVE-2022-4292: Fixed a use-after-free issue that could cause memory corruption or undefined behavior (bsc#1206075).
    • CVE-2022-4293: Fixed a floating point exception that could cause a crash (bsc#1206077).
    • CVE-2022-4141: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1205797).
    • CVE-2022-3705: Fixed an use-after-free issue that could cause a crash or memory corruption (bsc#1204779).
Record
SUSE-SU-2023:0209-1
Updated
2026-11-02
OSVSUSE-SU-2023:0211-1 No score

Security update for vim

This update for vim fixes the following issues:

  • Updated to version 9.0.1234:
    • CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash (bsc#1207396).
    • CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash (bsc#1207162).
    • CVE-2023-0054: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1206868).
    • CVE-2023-0051: Fixed an out of bounds memory access that could cause a crash (bsc#1206867).
    • CVE-2023-0049: Fixed an out of bounds memory access that could cause a crash (bsc#1206866).
Record
SUSE-SU-2023:0211-1
Updated
2026-11-02
OSVUSN-5836-1 No score

vim vulnerabilities

It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

Record
USN-5836-1
Updated
2026-11-02
OSVUSN-5963-1 No score

vim vulnerabilities

It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-47024, CVE-2023-0049, CVE-2023-0054, CVE-2023-0288, CVE-2023-0433)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-0051)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. (CVE-2023-1170, CVE-2023-1175)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-1264)

Record
USN-5963-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vim
Alpine:v3.18
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.19
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.20
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.21
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.22
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.23
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.24
 before 9.0.1167-r0
9.0.1167-r0
vim
Azure Linux:2
 before 9.0.1145-1
9.0.1145-1
vim
Alpaquita:23
 9.0.0820-r2 up to 9.1.0936-r0
9.1.0936-r0
vim-X11
TuxCare:CentOS:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
Show 71 moreShow less
Affected packages
PackageAffectedFixed
vim-common
TuxCare:CentOS:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim-enhanced
TuxCare:CentOS:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim-filesystem
TuxCare:CentOS:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim-minimal
TuxCare:CentOS:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim-X11
TuxCare:OracleLinux:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim-common
TuxCare:OracleLinux:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim-enhanced
TuxCare:OracleLinux:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim-filesystem
TuxCare:OracleLinux:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim-minimal
TuxCare:OracleLinux:6
 before 3:7.4.629-5.2.el6.tuxcare.els36
3:7.4.629-5.2.el6.tuxcare.els36
vim
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-athena
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-athena-py2
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-common
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-doc
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-gnome
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-gnome-py2
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-gtk
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-gtk-py2
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-gtk3
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-gtk3-py2
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-gui-common
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-nox
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-nox-py2
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-runtime
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-tiny
TuxCare:Ubuntu:16.04
 before 3:7.4.1689-3ubuntu1.5+tuxcare.els37
3:7.4.1689-3ubuntu1.5+tuxcare.els37
vim-X11
TuxCare:CentOS:7
From an advisory covering 10 CVEs
 before 2:7.4.629-8.el7_9.tuxcare.els1
2:7.4.629-8.el7_9.tuxcare.els1
vim-common
TuxCare:CentOS:7
From an advisory covering 10 CVEs
 before 2:7.4.629-8.el7_9.tuxcare.els1
2:7.4.629-8.el7_9.tuxcare.els1
vim-enhanced
TuxCare:CentOS:7
From an advisory covering 10 CVEs
 before 2:7.4.629-8.el7_9.tuxcare.els1
2:7.4.629-8.el7_9.tuxcare.els1
vim-filesystem
TuxCare:CentOS:7
From an advisory covering 10 CVEs
 before 2:7.4.629-8.el7_9.tuxcare.els1
2:7.4.629-8.el7_9.tuxcare.els1
vim-minimal
TuxCare:CentOS:7
From an advisory covering 10 CVEs
 before 2:7.4.629-8.el7_9.tuxcare.els1
2:7.4.629-8.el7_9.tuxcare.els1
vim-X11
TuxCare:AlmaLinux:9.2
 before 2:8.2.2637-20.el9_1.tuxcare.els7
2:8.2.2637-20.el9_1.tuxcare.els7
vim-common
TuxCare:AlmaLinux:9.2
 before 2:8.2.2637-20.el9_1.tuxcare.els7
2:8.2.2637-20.el9_1.tuxcare.els7
vim-enhanced
TuxCare:AlmaLinux:9.2
 before 2:8.2.2637-20.el9_1.tuxcare.els7
2:8.2.2637-20.el9_1.tuxcare.els7
vim-filesystem
TuxCare:AlmaLinux:9.2
 before 2:8.2.2637-20.el9_1.tuxcare.els7
2:8.2.2637-20.el9_1.tuxcare.els7
vim-minimal
TuxCare:AlmaLinux:9.2
 before 2:8.2.2637-20.el9_1.tuxcare.els7
2:8.2.2637-20.el9_1.tuxcare.els7
vim
Debian:12
 before 2:9.0.1378-1
2:9.0.1378-1
vim
Debian:13
 before 2:9.0.1378-1
2:9.0.1378-1
vim
Debian:14
 before 2:9.0.1378-1
2:9.0.1378-1
vim
Mageia:8
 before 9.0.1221-1.mga8
9.0.1221-1.mga8
vim
openEuler:20.03-LTS-SP1
From an advisory covering 3 CVEs
 before 9.0-6.oe1
9.0-6.oe1
vim
openEuler:20.03-LTS-SP3
From an advisory covering 3 CVEs
 before 9.0-6.oe1
9.0-6.oe1
vim
openEuler:22.03-LTS
From an advisory covering 3 CVEs
 before 9.0-7.oe2203sp1
9.0-7.oe2203sp1
vim
openEuler:22.03-LTS-SP1
From an advisory covering 3 CVEs
 before 9.0-7.oe2203sp1
9.0-7.oe2203sp1
vim
SUSE:OpenStack Cloud 9
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
openSUSE:Leap Micro 5.2
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
openSUSE:Leap Micro 5.3
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
openSUSE:Leap 15.4
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
Ubuntu:Pro:14.04:LTS
 before 2:7.4.052-1ubuntu3.1+esm6, plus listed versions
2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1
Show 4 moreShow less
2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm5
2:7.4.052-1ubuntu3.1+esm6
vim
Ubuntu:Pro:16.04:LTS
 before 2:7.4.1689-3ubuntu1.5+esm15, plus listed versions
2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1
Show 20 moreShow less
2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm14
2:7.4.1689-3ubuntu1.5+esm15
vim
Ubuntu:18.04:LTS
 before 2:8.0.1453-1ubuntu1.11, plus listed versions
2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3
Show 9 moreShow less
2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.10
2:8.0.1453-1ubuntu1.11
vim
Ubuntu:20.04:LTS
 before 2:8.1.2269-1ubuntu5.12, plus listed versions
2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4
Show 8 moreShow less
2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.11
2:8.1.2269-1ubuntu5.12
vim
Ubuntu:22.04:LTS
 before 2:8.2.3995-1ubuntu2.4, plus listed versions
2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3
Show 5 moreShow less
2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.4
vim
Ubuntu:Pro:14.04:LTS
From an advisory covering 5 CVEs
 before 2:7.4.052-1ubuntu3.1+esm6, plus listed versions
2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1
Show 4 moreShow less
2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm5
2:7.4.052-1ubuntu3.1+esm6
vim
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 2:7.4.1689-3ubuntu1.5+esm15, plus listed versions
2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1
Show 20 moreShow less
2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm14
2:7.4.1689-3ubuntu1.5+esm15
vim
Ubuntu:Pro:14.04:LTS
From an advisory covering 9 CVEs
 before 2:7.4.052-1ubuntu3.1+esm7, plus listed versions
2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1
Show 5 moreShow less
2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm52:7.4.052-1ubuntu3.1+esm6
2:7.4.052-1ubuntu3.1+esm7
vim
Ubuntu:Pro:16.04:LTS
From an advisory covering 9 CVEs
 before 2:7.4.1689-3ubuntu1.5+esm17, plus listed versions
2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1
Show 21 moreShow less
2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm142:7.4.1689-3ubuntu1.5+esm15
2:7.4.1689-3ubuntu1.5+esm17
vim
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 2:8.0.1453-1ubuntu1.11, plus listed versions
2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3
Show 9 moreShow less
2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.10
2:8.0.1453-1ubuntu1.11
vim
Ubuntu:20.04:LTS
From an advisory covering 9 CVEs
 before 2:8.1.2269-1ubuntu5.12, plus listed versions
2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4
Show 8 moreShow less
2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.11
2:8.1.2269-1ubuntu5.12
vim
Ubuntu:22.04:LTS
From an advisory covering 9 CVEs
 before 2:8.2.3995-1ubuntu2.4, plus listed versions
2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3
Show 5 moreShow less
2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.4

History

History
RecordedChangedSources
affected, facts
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-0049 is a high vulnerability (CVSS 7.3) in Vim, published January 4, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 48th percentile. Fixed in vim 9.0.1167-r0.

References

Show 59 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open