Vulnerability-Lookup

CVE-2023-48231 (GCVE-0-2023-48231)

Vulnerability from cvelistv5 – Published: 2023-11-16 22:59 – Updated: 2026-06-23 17:19

Title

Use-After-Free in win_close() in vim

Summary

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Severity

3.9 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-03 15:34 UTC

CWE

CWE-416 - Use After Free

Assigner

GitHub_M mitre root

References

7 references

URL	Tags
https://github.com/vim/vim/security/advisories/GH…	x_refsource_CONFIRM
https://github.com/vim/vim/commit/25aabc2b8ee1e19…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2023/11/16/1
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://security.netapp.com/advisory/ntap-2023122…

Impacted products

1 product

Vendor	Product	Version	CPE status
vim	vim	Affected: < 9.0.2106	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T21:23:39.078Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765"
          },
          {
            "name": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/11/16/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231227-0008/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-48231",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-03T15:34:03.396306Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-23T17:19:10.679Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim",
          "vendor": "vim",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 9.0.2106"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.9,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-27T15:06:38.072Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765"
        },
        {
          "name": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/11/16/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231227-0008/"
        }
      ],
      "source": {
        "advisory": "GHSA-8g46-v9ff-c765",
        "discovery": "UNKNOWN"
      },
      "title": "Use-After-Free in win_close() in vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2023-48231",
    "datePublished": "2023-11-16T22:59:37.681Z",
    "dateReserved": "2023-11-13T13:25:18.481Z",
    "dateUpdated": "2026-06-23T17:19:10.679Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-48231",
      "date": "2026-09-16",
      "epss": "0.00672",
      "percentile": "0.50335"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"9.0.2106\", \"matchCriteriaId\": \"9B4A1D40-D41B-4314-BC8F-759752BB925E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.\"}, {\"lang\": \"es\", \"value\": \"Vim es un editor de texto de l\\u00ednea de comandos de c\\u00f3digo abierto. Al cerrar una ventana, vim puede intentar acceder a la estructura de la ventana ya liberada. No se ha demostrado que la explotaci\\u00f3n m\\u00e1s all\\u00e1 de bloquear la aplicaci\\u00f3n sea viable. Este problema se solucion\\u00f3 en el commit `25aabc2b` que se incluy\\u00f3 en la versi\\u00f3n 9.0.2106. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad.\"}]",
      "id": "CVE-2023-48231",
      "lastModified": "2024-11-21T08:31:15.713",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"security-advisories@github.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L\", \"baseScore\": 3.9, \"baseSeverity\": \"LOW\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 1.3, \"impactScore\": 2.5}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 1.4}]}",
      "published": "2023-11-16T23:15:08.607",
      "references": "[{\"url\": \"http://www.openwall.com/lists/oss-security/2023/11/16/1\", \"source\": \"security-advisories@github.com\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a\", \"source\": \"security-advisories@github.com\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765\", \"source\": \"security-advisories@github.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/\", \"source\": \"security-advisories@github.com\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/\", \"source\": \"security-advisories@github.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/\", \"source\": \"security-advisories@github.com\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20231227-0008/\", \"source\": \"security-advisories@github.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/11/16/1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20231227-0008/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
      "sourceIdentifier": "security-advisories@github.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"security-advisories@github.com\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-48231\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2023-11-16T23:15:08.607\",\"lastModified\":\"2026-06-23T18:17:34.357\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.\"},{\"lang\":\"es\",\"value\":\"Vim es un editor de texto de l\u00ednea de comandos de c\u00f3digo abierto. Al cerrar una ventana, vim puede intentar acceder a la estructura de la ventana ya liberada. No se ha demostrado que la explotaci\u00f3n m\u00e1s all\u00e1 de bloquear la aplicaci\u00f3n sea viable. Este problema se solucion\u00f3 en el commit `25aabc2b` que se incluy\u00f3 en la versi\u00f3n 9.0.2106. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"vim\",\"product\":\"vim\",\"versions\":[{\"version\":\"\u003c 9.0.2106\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L\",\"baseScore\":3.9,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.3,\"impactScore\":2.5},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-06-03T15:34:03.396306Z\",\"id\":\"CVE-2023-48231\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.0.2106\",\"matchCriteriaId\":\"9B4A1D40-D41B-4314-BC8F-759752BB925E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2023/11/16/1\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20231227-0008/\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/11/16/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20231227-0008/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-26T01:04:03+00:00",
      "cve": "CVE-2023-48231",
      "id": "CVE-2023-48231",
      "initial_release_date": "2023-11-16T00:00:00+00:00",
      "product_status:known_affected": "24",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "vim: use after free in win_close()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48231.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-08-23T00:14:36Z",
      "cve": "CVE-2023-48231",
      "id": "CVE-2023-48231",
      "initial_release_date": "2023-11-21T02:19:01Z",
      "product_status:known_affected": "394",
      "product_status:recommended": "351",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-48231",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-48231.json",
      "version": "53"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765\", \"name\": \"https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a\", \"name\": \"https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/11/16/1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20231227-0008/\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T21:23:39.078Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-48231\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-06-03T15:34:03.396306Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-03T15:34:04.722Z\"}}], \"cna\": {\"title\": \"Use-After-Free in win_close() in vim\", \"source\": {\"advisory\": \"GHSA-8g46-v9ff-c765\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 3.9, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"vim\", \"product\": \"vim\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 9.0.2106\"}]}], \"references\": [{\"url\": \"https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765\", \"name\": \"https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a\", \"name\": \"https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/11/16/1\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20231227-0008/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416: Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2023-12-27T15:06:38.072Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-48231\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-23T17:19:10.679Z\", \"dateReserved\": \"2023-11-13T13:25:18.481Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2023-11-16T22:59:37.681Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

GSD-2023-48231

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2023-48231

Aliases

CVE-2023-48231

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-48231",
    "id": "GSD-2023-48231"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-48231"
      ],
      "details": "Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.",
      "id": "GSD-2023-48231",
      "modified": "2023-12-13T01:20:39.515708Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security-advisories@github.com",
        "ID": "CVE-2023-48231",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "vim",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "\u003c 9.0.2106"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "vim"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.9,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-416",
                "lang": "eng",
                "value": "CWE-416: Use After Free"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765",
            "refsource": "MISC",
            "url": "https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765"
          },
          {
            "name": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a",
            "refsource": "MISC",
            "url": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a"
          },
          {
            "name": "http://www.openwall.com/lists/oss-security/2023/11/16/1",
            "refsource": "MISC",
            "url": "http://www.openwall.com/lists/oss-security/2023/11/16/1"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20231227-0008/",
            "refsource": "MISC",
            "url": "https://security.netapp.com/advisory/ntap-20231227-0008/"
          }
        ]
      },
      "source": {
        "advisory": "GHSA-8g46-v9ff-c765",
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9B4A1D40-D41B-4314-BC8F-759752BB925E",
                    "versionEndExcluding": "9.0.2106",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability."
          },
          {
            "lang": "es",
            "value": "Vim es un editor de texto de l\u00ednea de comandos de c\u00f3digo abierto. Al cerrar una ventana, vim puede intentar acceder a la estructura de la ventana ya liberada. No se ha demostrado que la explotaci\u00f3n m\u00e1s all\u00e1 de bloquear la aplicaci\u00f3n sea viable. Este problema se solucion\u00f3 en el commit `25aabc2b` que se incluy\u00f3 en la versi\u00f3n 9.0.2106. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."
          }
        ],
        "id": "CVE-2023-48231",
        "lastModified": "2023-12-28T17:39:29.390",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 4.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 1.4,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 3.9,
                "baseSeverity": "LOW",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 1.3,
              "impactScore": 2.5,
              "source": "security-advisories@github.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2023-11-16T23:15:08.607",
        "references": [
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Mailing List"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/11/16/1"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Mailing List"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Mailing List"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231227-0008/"
          }
        ],
        "sourceIdentifier": "security-advisories@github.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "security-advisories@github.com",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}

MSRC_CVE-2023-48231

Vulnerability from csaf_microsoft - Published: 2023-11-01 07:00 - Updated: 2023-11-25 00:00

Summary

Use-After-Free in win_close() in vim

Scope

1 vulnerability in this advisory, including CVE-2023-48231.

CVE-2023-48231

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Fixed: 1 product Known affected: 1 product

https://learn.microsoft.com/en-us/azure/azure-linux/tutoria…

Open the full advisory

SUSE-SU-2024:0783-1

Vulnerability from csaf_suse - Published: 2024-03-06 16:03 - Updated: 2024-03-06 16:03

Summary

Security update for vim

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2023-48231.

CVE-2023-48231

3.9 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Recommended: 20 products

Open the full advisory

SUSE-SU-2024:0871-1

Vulnerability from csaf_suse - Published: 2024-03-13 12:08 - Updated: 2024-03-13 12:08

Summary

Security update for vim

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2023-48231.

CVE-2023-48231

3.9 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Recommended: 133 products

Open the full advisory

SUSE-SU-2024:1287-1

Vulnerability from csaf_suse - Published: 2024-04-15 13:03 - Updated: 2024-04-15 13:03

Summary

Security update for vim

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2023-48231.

CVE-2023-48231

3.9 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Recommended: 32 products

Open the full advisory

ubuntu-cve-2023-48231

Vulnerability from osv_ubuntu

Published

2023-11-16 23:15

Modified

2025-09-08 16:56

Summary

Details

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Severity

4.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

3.9 (Low)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2023-48231	REPORT
	https://github.com/vim/vim/security/advisories/GH…	REPORT
	https://github.com/vim/vim/commit/25aabc2b8ee1e19…	REPORT
	https://github.com/vim/vim/commit/25aabc2b8ee1e19…	REPORT
	http://www.openwall.com/lists/oss-security/2023/11/16/1	REPORT
	https://ubuntu.com/security/notices/USN-6557-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2023-48231	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-lesstif",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:7.4.052-1ubuntu3.1+esm15?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:7.4.052-1ubuntu3.1+esm15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:7.4.000-1ubuntu2",
        "2:7.4.052-1ubuntu1",
        "2:7.4.052-1ubuntu2",
        "2:7.4.052-1ubuntu3",
        "2:7.4.052-1ubuntu3.1",
        "2:7.4.052-1ubuntu3.1+esm1",
        "2:7.4.052-1ubuntu3.1+esm3",
        "2:7.4.052-1ubuntu3.1+esm4",
        "2:7.4.052-1ubuntu3.1+esm5",
        "2:7.4.052-1ubuntu3.1+esm6",
        "2:7.4.052-1ubuntu3.1+esm7",
        "2:7.4.052-1ubuntu3.1+esm8",
        "2:7.4.052-1ubuntu3.1+esm9",
        "2:7.4.052-1ubuntu3.1+esm10",
        "2:7.4.052-1ubuntu3.1+esm11",
        "2:7.4.052-1ubuntu3.1+esm12",
        "2:7.4.052-1ubuntu3.1+esm13",
        "2:7.4.052-1ubuntu3.1+esm14"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-athena-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gnome-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk3-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-nox-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:7.4.1689-3ubuntu1.5+esm22?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:7.4.1689-3ubuntu1.5+esm22"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:7.4.712-2ubuntu4",
        "2:7.4.826-1ubuntu1",
        "2:7.4.826-1ubuntu2",
        "2:7.4.826-1ubuntu3",
        "2:7.4.963-1ubuntu1",
        "2:7.4.963-1ubuntu4",
        "2:7.4.963-1ubuntu5",
        "2:7.4.1689-3ubuntu1",
        "2:7.4.1689-3ubuntu1.1",
        "2:7.4.1689-3ubuntu1.2",
        "2:7.4.1689-3ubuntu1.3",
        "2:7.4.1689-3ubuntu1.4",
        "2:7.4.1689-3ubuntu1.5",
        "2:7.4.1689-3ubuntu1.5+esm2",
        "2:7.4.1689-3ubuntu1.5+esm3",
        "2:7.4.1689-3ubuntu1.5+esm4",
        "2:7.4.1689-3ubuntu1.5+esm5",
        "2:7.4.1689-3ubuntu1.5+esm6",
        "2:7.4.1689-3ubuntu1.5+esm7",
        "2:7.4.1689-3ubuntu1.5+esm8",
        "2:7.4.1689-3ubuntu1.5+esm10",
        "2:7.4.1689-3ubuntu1.5+esm11",
        "2:7.4.1689-3ubuntu1.5+esm12",
        "2:7.4.1689-3ubuntu1.5+esm13",
        "2:7.4.1689-3ubuntu1.5+esm14",
        "2:7.4.1689-3ubuntu1.5+esm15",
        "2:7.4.1689-3ubuntu1.5+esm17",
        "2:7.4.1689-3ubuntu1.5+esm18",
        "2:7.4.1689-3ubuntu1.5+esm19",
        "2:7.4.1689-3ubuntu1.5+esm20"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.0.1453-1ubuntu1.13+esm7?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.0.1453-1ubuntu1.13+esm7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.0.0197-4ubuntu5",
        "2:8.0.1144-1ubuntu1",
        "2:8.0.1401-1ubuntu1",
        "2:8.0.1401-1ubuntu2",
        "2:8.0.1401-1ubuntu3",
        "2:8.0.1453-1ubuntu1",
        "2:8.0.1453-1ubuntu1.1",
        "2:8.0.1453-1ubuntu1.3",
        "2:8.0.1453-1ubuntu1.4",
        "2:8.0.1453-1ubuntu1.6",
        "2:8.0.1453-1ubuntu1.7",
        "2:8.0.1453-1ubuntu1.8",
        "2:8.0.1453-1ubuntu1.9",
        "2:8.0.1453-1ubuntu1.10",
        "2:8.0.1453-1ubuntu1.11",
        "2:8.0.1453-1ubuntu1.12",
        "2:8.0.1453-1ubuntu1.13",
        "2:8.0.1453-1ubuntu1.13+esm1",
        "2:8.0.1453-1ubuntu1.13+esm3",
        "2:8.0.1453-1ubuntu1.13+esm4",
        "2:8.0.1453-1ubuntu1.13+esm5",
        "2:8.0.1453-1ubuntu1.13+esm6"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5.21?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.1.2269-1ubuntu5.21"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.1.0875-5ubuntu2",
        "2:8.1.0875-5ubuntu3",
        "2:8.1.0875-5ubuntu4",
        "2:8.1.2269-1ubuntu1",
        "2:8.1.2269-1ubuntu4",
        "2:8.1.2269-1ubuntu5",
        "2:8.1.2269-1ubuntu5.3",
        "2:8.1.2269-1ubuntu5.4",
        "2:8.1.2269-1ubuntu5.6",
        "2:8.1.2269-1ubuntu5.7",
        "2:8.1.2269-1ubuntu5.8",
        "2:8.1.2269-1ubuntu5.9",
        "2:8.1.2269-1ubuntu5.11",
        "2:8.1.2269-1ubuntu5.12",
        "2:8.1.2269-1ubuntu5.13",
        "2:8.1.2269-1ubuntu5.14",
        "2:8.1.2269-1ubuntu5.15",
        "2:8.1.2269-1ubuntu5.16",
        "2:8.1.2269-1ubuntu5.17",
        "2:8.1.2269-1ubuntu5.18",
        "2:8.1.2269-1ubuntu5.20"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.2.3995-1ubuntu2.15?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.2.3995-1ubuntu2.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.2.2434-3ubuntu3",
        "2:8.2.2434-3ubuntu4",
        "2:8.2.3565-1ubuntu1",
        "2:8.2.3565-1ubuntu2",
        "2:8.2.3565-1ubuntu3",
        "2:8.2.3565-1ubuntu5",
        "2:8.2.3995-1ubuntu1",
        "2:8.2.3995-1ubuntu2",
        "2:8.2.3995-1ubuntu2.1",
        "2:8.2.3995-1ubuntu2.3",
        "2:8.2.3995-1ubuntu2.4",
        "2:8.2.3995-1ubuntu2.5",
        "2:8.2.3995-1ubuntu2.7",
        "2:8.2.3995-1ubuntu2.8",
        "2:8.2.3995-1ubuntu2.9",
        "2:8.2.3995-1ubuntu2.10",
        "2:8.2.3995-1ubuntu2.11",
        "2:8.2.3995-1ubuntu2.12",
        "2:8.2.3995-1ubuntu2.13"
      ]
    }
  ],
  "aliases": [],
  "details": "Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.",
  "id": "UBUNTU-CVE-2023-48231",
  "modified": "2025-09-08T16:56:35Z",
  "published": "2023-11-16T23:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48231"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a"
    },
    {
      "type": "REPORT",
      "url": "http://www.openwall.com/lists/oss-security/2023/11/16/1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6557-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48231"
    }
  ],
  "related": [
    "USN-6557-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2023-48231"
  ]
}

VDE-2024-073

Vulnerability from csaf_phoenixcontactgmbhcokg - Published: 2024-12-09 11:00 - Updated: 2025-05-22 13:03

Summary

Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware

Severity

Critical

Scope

63 vulnerabilities in this advisory, including CVE-2023-48231.

CVE-2023-48231

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit '25aabc2b' which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

3.9 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Fixed: 8 products Known affected: 8 products

Open the full advisory

WID-SEC-W-2023-2962

Vulnerability from csaf_certbund - Published: 2023-11-16 23:00 - Updated: 2026-05-27 22:00

Summary

vim: Mehrere Schwachstellen

Severity

Niedrig

Scope

7 vulnerabilities in this advisory, including CVE-2023-48231.

CVE-2023-48231

Known affected: 10 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-48231 (GCVE-0-2023-48231)

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature

Related by attack behaviour