Every CVE Search/ Get API key

CVE-2023-0051

Heap-based Buffer Overflow in vim/vim

7.3 HighFix available

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.54%Down 0.3 points since Jan 5, 2023
90%50%10%1%

What each source reports

CVE List Score used 7.3

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
CVE-2023-0051
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2023-12154 7.3

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
EUVD-2023-12154
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-7g4w-jr36-jfhg 7.8

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
GHSA-7g4w-jr36-jfhg
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-02
NVD 7.8

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
CVE-2023-0051
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-02
OSVALPINE-CVE-2023-0051 7.8

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
ALPINE-CVE-2023-0051
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-12939 7.8

CVE-2023-0051 affecting package vim for versions less than 9.0.1145-1

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
AZL-12939
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 8 moreShow less
OSVBELL-CVE-2023-0051 7.8
Record
BELL-CVE-2023-0051
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.3

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
CVE-2023-0051
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-02
OSVDEBIAN-CVE-2023-0051 7.8

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
DEBIAN-CVE-2023-0051
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1026 7.3

vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.(CVE-2023-0049)

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.(CVE-2023-0051)

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.(CVE-2023-0054)

Record
OESA-2023-1026
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-0051 7.8

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Record
UBUNTU-CVE-2023-0051
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVSUSE-SU-2023:0209-1 No score

Security update for vim

This update for vim fixes the following issues:

  • Updated to version 9.0.1234:
    • CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash (bsc#1207396).
    • CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash (bsc#1207162).
    • CVE-2023-0054: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1206868).
    • CVE-2023-0051: Fixed an out of bounds memory access that could cause a crash (bsc#1206867).
    • CVE-2023-0049: Fixed an out of bounds memory access that could cause a crash (bsc#1206866).
    • CVE-2022-3491: Fixed an out of bounds memory access that could cause a crash (bsc#1206028).
    • CVE-2022-3520: Fixed an out of bounds memory access that could cause a crash (bsc#1206071).
    • CVE-2022-3591: Fixed a use-after-free issue that could cause memory corruption or undefined behavior (bsc#1206072).
    • CVE-2022-4292: Fixed a use-after-free issue that could cause memory corruption or undefined behavior (bsc#1206075).
    • CVE-2022-4293: Fixed a floating point exception that could cause a crash (bsc#1206077).
    • CVE-2022-4141: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1205797).
    • CVE-2022-3705: Fixed an use-after-free issue that could cause a crash or memory corruption (bsc#1204779).
Record
SUSE-SU-2023:0209-1
Updated
2026-11-02
OSVSUSE-SU-2023:0211-1 No score

Security update for vim

This update for vim fixes the following issues:

  • Updated to version 9.0.1234:
    • CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash (bsc#1207396).
    • CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash (bsc#1207162).
    • CVE-2023-0054: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1206868).
    • CVE-2023-0051: Fixed an out of bounds memory access that could cause a crash (bsc#1206867).
    • CVE-2023-0049: Fixed an out of bounds memory access that could cause a crash (bsc#1206866).
Record
SUSE-SU-2023:0211-1
Updated
2026-11-02
OSVUSN-5963-1 No score

vim vulnerabilities

It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-47024, CVE-2023-0049, CVE-2023-0054, CVE-2023-0288, CVE-2023-0433)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-0051)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. (CVE-2023-1170, CVE-2023-1175)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-1264)

Record
USN-5963-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vim
Alpine:v3.18
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.19
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.20
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.21
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.22
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.23
 before 9.0.1167-r0
9.0.1167-r0
vim
Alpine:v3.24
 before 9.0.1167-r0
9.0.1167-r0
vim
Azure Linux:2
 before 9.0.1145-1
9.0.1145-1
vim
Alpaquita:23
 9.0.0820-r2 up to 9.1.0936-r0
9.1.0936-r0
vim
Debian:12
 before 2:9.0.1378-1
2:9.0.1378-1
Show 28 moreShow less
Affected packages
PackageAffectedFixed
vim
Debian:13
 before 2:9.0.1378-1
2:9.0.1378-1
vim
Debian:14
 before 2:9.0.1378-1
2:9.0.1378-1
vim
openEuler:20.03-LTS-SP1
From an advisory covering 3 CVEs
 before 9.0-6.oe1
9.0-6.oe1
vim
openEuler:20.03-LTS-SP3
From an advisory covering 3 CVEs
 before 9.0-6.oe1
9.0-6.oe1
vim
openEuler:22.03-LTS
From an advisory covering 3 CVEs
 before 9.0-7.oe2203sp1
9.0-7.oe2203sp1
vim
openEuler:22.03-LTS-SP1
From an advisory covering 3 CVEs
 before 9.0-7.oe2203sp1
9.0-7.oe2203sp1
vim
SUSE:OpenStack Cloud 9
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 9.0.1234-17.12.1
9.0.1234-17.12.1
vim
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
openSUSE:Leap Micro 5.2
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
openSUSE:Leap Micro 5.3
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
openSUSE:Leap 15.4
From an advisory covering 5 CVEs
 before 9.0.1234-150000.5.34.1
9.0.1234-150000.5.34.1
vim
Ubuntu:22.04:LTS
 before 2:8.2.3995-1ubuntu2.4, plus listed versions
2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3
Show 5 moreShow less
2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.4
vim
Ubuntu:Pro:14.04:LTS
From an advisory covering 9 CVEs
 before 2:7.4.052-1ubuntu3.1+esm7, plus listed versions
2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1
Show 5 moreShow less
2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm52:7.4.052-1ubuntu3.1+esm6
2:7.4.052-1ubuntu3.1+esm7
vim
Ubuntu:Pro:16.04:LTS
From an advisory covering 9 CVEs
 before 2:7.4.1689-3ubuntu1.5+esm17, plus listed versions
2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1
Show 21 moreShow less
2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm142:7.4.1689-3ubuntu1.5+esm15
2:7.4.1689-3ubuntu1.5+esm17
vim
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 2:8.0.1453-1ubuntu1.11, plus listed versions
2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3
Show 9 moreShow less
2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.10
2:8.0.1453-1ubuntu1.11
vim
Ubuntu:20.04:LTS
From an advisory covering 9 CVEs
 before 2:8.1.2269-1ubuntu5.12, plus listed versions
2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4
Show 8 moreShow less
2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.11
2:8.1.2269-1ubuntu5.12
vim
Ubuntu:22.04:LTS
From an advisory covering 9 CVEs
 before 2:8.2.3995-1ubuntu2.4, plus listed versions
2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3
Show 5 moreShow less
2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.4

History

History
RecordedChangedSources
affected, facts
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-0051 is a high vulnerability (CVSS 7.3) in Vim, published January 4, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. Fixed in vim 9.0.1167-r0.

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open