Divide By Zero in vim/vim
CVE-2023-1127

7.8HIGH

Key Information:

Vendor

Vim

Status
Vim/vim
Vendor
CVE Published:
1 March 2023

What is CVE-2023-1127?

A Divide By Zero vulnerability exists in Vim, impacting versions prior to 9.0.1367. This flaw may lead to application crashes or unexpected behavior, posing risks during software execution. Users and administrators are encouraged to upgrade to the latest version to mitigate these risks and ensure optimal performance of the application.

Affected Version(s)

vim/vim < 9.0.1367

References

https://huntr.dev/bounties/2d4d309e-4c96-415f-9070-36d081...
https://github.com/vim/vim/commit/e0f869196930ef5f25a0ac4...
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

CVSS V3.0

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.