SUSE-SU-2024:1287-1: vim&distro=openSUSE Leap 15.5
Vulnerability summary
SUSE-SU-2024:1287-1 is a vulnerability in vim&distro=openSUSE Leap 15.5 with no CVSS score yet.
Advisory lineage
Upstream 10 · Downstream 0 · Related 10Timeline
- 15-04-2024PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for vim This update for vim fixes the following issues: Updated to version 9.1.0111, fixes the following security problems - CVE-2023-48231: Use-After-Free in win_close() (bsc#1217316). - CVE-2023-48232: Floating point Exception in adjust_plines_for_skipcol() (bsc#1217320). - CVE-2023-48233: overflow with count for :s command (bsc#1217321). - CVE-2023-48234: overflow in nv_z_get_count (bsc#1217324). - CVE-2023-48235: overflow in ex address parsing (CVE-2023-48235). - CVE-2023-48236: overflow in get_number (bsc#1217329). - CVE-2023-48237: overflow in shift_line (bsc#1217330). - CVE-2023-48706: heap-use-after-free in ex_substitute (bsc#1217432). - CVE-2024-22667: stack-based buffer overflow in did_set_langmap function in map.c (bsc#1219581). - CVE-2023-4750: Heap use-after-free in function bt_quickfix (bsc#1215005).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- vim&distro=SUSE Linux Enterprise Micro 5.5< 9.1.0111-150500.20.9.1
- vim&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5< 9.1.0111-150500.20.9.1
- vim&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP5< 9.1.0111-150500.20.9.1
Opensuse1 product
- vim&distro=openSUSE Leap 15.5< 9.1.0111-150500.20.9.1
2 vendors · 4 products