{"id":"CVE-2023-0512","aliases":["ALPINE-CVE-2023-0512","AZL-13233","BELL-CVE-2023-0512","DEBIAN-CVE-2023-0512","EUVD-2023-12558","GHSA-whp8-xgvp-xj3v","SUSE-SU-2023:0760-1","SUSE-SU-2023:0781-1","SUSE-SU-2023:0781-2"],"status":"published","title":"Divide By Zero in vim/vim","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","severity":{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00504,"percentile":0.43421,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-369"],"published":"2023-01-26T00:00:00Z","modified":"2026-11-03T06:32:42Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"vim","fixed_in":["9.0.1251-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"vim","fixed_in":["9.0.1251-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"vim","fixed_in":["9.0.1251-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"vim","fixed_in":["9.0.1251-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"vim","fixed_in":["9.0.1251-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"vim","fixed_in":["9.0.1251-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vim","fixed_in":["9.0.1251-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"vim","fixed_in":["9.0.1247-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"vim","fixed_in":["9.1.0936-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"vim","fixed_in":["2:9.0.1378-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:9.0.1378-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:9.0.1378-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1251-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1251-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1251-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1251-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1251-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1251-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1251-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1247-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0999-r0"},{"fixed":"9.1.0936-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-17.15.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-17.15.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-17.15.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-17.15.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-17.15.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-17.15.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-17.15.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-17.15.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1386-150000.5.37.1"}]}],"bundled":4}],"products":[{"vendor":"vim","product":"vim"},{"vendor":"vim","product":"vim/vim"}],"references":[{"url":"https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74","tags":["x_transferred","Exploit","Patch","Third Party Advisory","web"]},{"url":"https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://support.apple.com/kb/HT213677","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT213675","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT213670","tags":["x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2023/Mar/17","tags":["mailing-list","x_transferred","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Mar/18","tags":["mailing-list","x_transferred","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Mar/21","tags":["mailing-list","x_transferred","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0512","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/"},{"url":"https://github.com/advisories/GHSA-whp8-xgvp-xj3v"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-0512","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-0512","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0512.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-0512","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230760-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207780","tags":["report"]},{"url":"https://bugzilla.suse.com/1208828","tags":["report"]},{"url":"https://bugzilla.suse.com/1208957","tags":["report"]},{"url":"https://bugzilla.suse.com/1208959","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1175","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230781-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230781-2/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-0512","title":"Divide By Zero in vim/vim","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","status":"published","published":"2023-01-26T00:00:00Z","modified":"2025-03-31T16:44:58.673Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:35:35.580545Z"}],"euvd":[{"id":"EUVD-2023-12558","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","status":"published","published":"2023-01-26T00:00:00Z","modified":"2025-03-31T16:44:58Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:46.759966Z"}],"ghsa":[{"id":"GHSA-whp8-xgvp-xj3v","title":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","status":"published","published":"2023-01-30T18:30:28Z","modified":"2023-04-09T05:00:50Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:54:28.289847Z"}],"nvd":[{"id":"CVE-2023-0512","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","status":"published","published":"2023-01-30T16:15:09.507Z","modified":"2026-06-17T05:25:43.21Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:07:46.064662Z"}],"osv":[{"id":"ALPINE-CVE-2023-0512","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","status":"published","published":"2023-01-30T16:15:09.507Z","modified":"2026-11-03T06:32:42.143930641Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"AZL-13233","title":"CVE-2023-0512 affecting package vim for versions less than 9.0.1247-1","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","status":"published","published":"2023-01-30T16:15:09Z","modified":"2026-04-21T04:22:45.557619Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"BELL-CVE-2023-0512","status":"published","published":"2023-08-31T12:14:53.284985Z","modified":"2026-01-26T09:33:05.033944Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2023-0512","title":"Divide By Zero in vim/vim","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","status":"published","published":"2023-01-26T00:00:00Z","modified":"2026-10-28T10:31:41.222657537Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T15:44:29.487253Z"},{"id":"DEBIAN-CVE-2023-0512","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.","status":"published","published":"2023-01-30T16:15:09.507Z","modified":"2026-10-26T18:01:18.817247739Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.029012Z"},{"id":"SUSE-SU-2023:0760-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n\n- CVE-2023-0512: Fixed a divide By Zero (bsc#1207780).\n- CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957).\n- CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959).\n- CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).\n\nUpdated to version 9.0 with patch level 1386.\n\n- https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386\n","status":"published","published":"2023-03-16T10:35:31Z","modified":"2026-02-04T02:48:31.944639Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:0781-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2023-0512: Fixed a divide By Zero (bsc#1207780).\n- CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957).\n- CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959).\n- CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).\n\nUpdated to version 9.0 with patch level 1386.\n\n- https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386\n","status":"published","published":"2023-03-16T18:07:19Z","modified":"2026-02-04T03:41:34.753312Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:0781-2","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2023-0512: Fixed a divide By Zero (bsc#1207780).\n- CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957).\n- CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959).\n- CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).\n\nUpdated to version 9.0 with patch level 1386.\n\n- https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386\n","status":"published","published":"2023-04-27T14:10:43Z","modified":"2026-02-04T04:11:10.610486Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}