Use After Free Affecting vim-data package, versions <9.1.0111-150000.5.60.1


Severity

Recommended
0.0
low
0
10

Based on SUSE Linux Enterprise Server security rating.

Threat Intelligence

EPSS
0.05% (23rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Use After Free vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-SLES154-VIMDATA-6436414
  • published14 Mar 2024
  • disclosed13 Mar 2024

Introduced: 13 Mar 2024

CVE-2023-48706  (opens in a new tab)
CWE-416  (opens in a new tab)

How to fix?

Upgrade SLES:15.4 vim-data to version 9.1.0111-150000.5.60.1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream vim-data package and not the vim-data package as distributed by SLES. See How to fix? for SLES:15.4 relevant fixed versions and status.

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later then be accessed by the initial :s command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it seems to work only reliably for the very first :s command. It may also cause a crash of Vim. Version 9.0.2121 contains a fix for this issue.

CVSS Scores

version 3.1