{"id":"CVE-2023-3896","aliases":["AZL-27893","DEBIAN-CVE-2023-3896","EUVD-2023-44522","GHSA-9r4h-7xv2-84wf"],"status":"published","title":"A divide by zero issue existed in vim of OpenCloudOS Stream","description":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00414,"percentile":0.35941,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-369"],"published":"2023-08-07T12:13:37Z","modified":"2026-10-26T18:03:06Z","fixes":[{"ecosystem":"Azure Linux:2","package":"vim","fixed_in":["9.0.1562-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:9.0.1894-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:9.0.1894-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1562-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:9.0.1378-2","2:9.0.1378-2+deb12u1","2:9.0.1378-2+deb12u2","2:9.0.1658-1","2:9.0.1672-1","2:9.0.1894-1","2:9.0.2018-1","2:9.0.2087-1","2:9.0.2103-1","2:9.0.2116-1","2:9.0.2189-1","2:9.1.0-1","2:9.1.0016-1","2:9.1.0199-1","2:9.1.0374-1","2:9.1.0377-1","2:9.1.0496-1","2:9.1.0698-1","2:9.1.0709-1","2:9.1.0709-2","2:9.1.0777-1","2:9.1.0861-1","2:9.1.0967-1","2:9.1.0967-2","2:9.1.1113-1","2:9.1.1230-1","2:9.1.1230-2","2:9.1.1385-1","2:9.1.1766-1","2:9.1.1829-1","2:9.1.1846-1","2:9.1.1882-1","2:9.1.2103-1","2:9.1.2141-1","2:9.2.0119-1","2:9.2.0136-1","2:9.2.0218-1","2:9.2.0315-1","2:9.2.0338-1","2:9.2.0355-1","2:9.2.0428-1","2:9.2.0461-1","2:9.2.0524-1","2:9.2.0782-1","2:9.2.0858-1"]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1894-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1894-1"}]}]}],"products":[{"vendor":"opencloudos","product":"opencloudos stream"},{"vendor":"vim","product":"vim"}],"references":[{"url":"https://github.com/vim/vim/issues/12528","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://github.com/vim/vim/pull/12540","tags":["x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20230831-0012/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3896","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20230831-0012"},{"url":"https://github.com/advisories/GHSA-9r4h-7xv2-84wf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-3896","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-3896","title":"A divide by zero issue existed in vim of OpenCloudOS Stream","description":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","status":"published","published":"2023-08-07T12:13:37.229Z","modified":"2025-02-13T17:02:37.04Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-44522","description":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","status":"published","published":"2023-08-07T12:13:37Z","modified":"2025-02-13T17:02:37Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:03:49.604577Z"}],"ghsa":[{"id":"GHSA-9r4h-7xv2-84wf","title":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","description":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","status":"published","published":"2023-08-07T15:30:27Z","modified":"2025-02-13T18:32:47Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:59:55.900946Z"}],"nvd":[{"id":"CVE-2023-3896","description":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","status":"published","published":"2023-08-07T13:15:12.927Z","modified":"2026-06-17T06:15:16.097Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:08:20.798312Z"}],"osv":[{"id":"AZL-27893","title":"CVE-2023-3896 affecting package vim for versions less than 9.0.1562-2","description":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","status":"published","published":"2023-08-07T13:15:12Z","modified":"2026-04-21T04:25:42.614251Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"CVE-2023-3896","description":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","status":"published","published":"2023-08-07T13:15:12.927Z","modified":"2026-10-21T02:49:55.159200748Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:32.922049Z"},{"id":"DEBIAN-CVE-2023-3896","description":"Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3","status":"published","published":"2023-08-07T13:15:12.927Z","modified":"2026-10-26T18:03:06.231807852Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.980321Z"}]}}