SUSE-SU-2023:3942-1: vim&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2023:3942-1 is a vulnerability in vim&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 03-10-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for vim This update for vim fixes the following issues: Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004). - CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925). - CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924). - CVE-2023-4738: Fixed heap buffer overflow in vim_regsub_both (bsc#1214922). - CVE-2023-4752: Fixed heap use-after-free in function ins_compl_get_exp (bsc#1215006). - CVE-2023-4781: Fixed heap buffer overflow in function vim_regsub_both (bsc#1215033). Other fixes: - Calling vim on xterm leads to missing first character of the command prompt (bsc#1211461) - Rendering corruption in gvim with all 9.x versions (bsc#1210738) - Updated to version 9.0 with patch level 1894
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- vim&distro=SUSE Linux Enterprise Server 12 SP5< 9.0.1894-17.23.2
- vim&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 9.0.1894-17.23.2
1 vendor · 2 products