Vulnerability-Lookup

UBUNTU-CVE-2023-46246 (CVE-2023-46246)

Vulnerability from osv_ubuntu – Published: 2023-10-27 19:15 – Updated: 2025-09-08 16:56 – Source website

Details

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function ga_grow_inner in in the file src/alloc.c at line 748, which is freed in the file src/ex_docmd.c in the function do_cmdline at line 1010 and then used again in src/cmdhist.c at line 759. When using the :history command, it's possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068.

Severity

5.5 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2023-46246	REPORT
	https://github.com/vim/vim/security/advisories/GH…	REPORT
	https://github.com/vim/vim/commit/9198c1f2b1ddecd…	REPORT
	https://github.com/vim/vim/commit/9198c1f2b1ddecd…	REPORT
	https://ubuntu.com/security/notices/USN-6557-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2023-46246	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-lesstif",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:7.4.052-1ubuntu3.1+esm15?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:7.4.052-1ubuntu3.1+esm15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:7.4.000-1ubuntu2",
        "2:7.4.052-1ubuntu1",
        "2:7.4.052-1ubuntu2",
        "2:7.4.052-1ubuntu3",
        "2:7.4.052-1ubuntu3.1",
        "2:7.4.052-1ubuntu3.1+esm1",
        "2:7.4.052-1ubuntu3.1+esm3",
        "2:7.4.052-1ubuntu3.1+esm4",
        "2:7.4.052-1ubuntu3.1+esm5",
        "2:7.4.052-1ubuntu3.1+esm6",
        "2:7.4.052-1ubuntu3.1+esm7",
        "2:7.4.052-1ubuntu3.1+esm8",
        "2:7.4.052-1ubuntu3.1+esm9",
        "2:7.4.052-1ubuntu3.1+esm10",
        "2:7.4.052-1ubuntu3.1+esm11",
        "2:7.4.052-1ubuntu3.1+esm12",
        "2:7.4.052-1ubuntu3.1+esm13",
        "2:7.4.052-1ubuntu3.1+esm14"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-athena-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gnome-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk3-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-nox-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:7.4.1689-3ubuntu1.5+esm22?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:7.4.1689-3ubuntu1.5+esm22"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:7.4.712-2ubuntu4",
        "2:7.4.826-1ubuntu1",
        "2:7.4.826-1ubuntu2",
        "2:7.4.826-1ubuntu3",
        "2:7.4.963-1ubuntu1",
        "2:7.4.963-1ubuntu4",
        "2:7.4.963-1ubuntu5",
        "2:7.4.1689-3ubuntu1",
        "2:7.4.1689-3ubuntu1.1",
        "2:7.4.1689-3ubuntu1.2",
        "2:7.4.1689-3ubuntu1.3",
        "2:7.4.1689-3ubuntu1.4",
        "2:7.4.1689-3ubuntu1.5",
        "2:7.4.1689-3ubuntu1.5+esm2",
        "2:7.4.1689-3ubuntu1.5+esm3",
        "2:7.4.1689-3ubuntu1.5+esm4",
        "2:7.4.1689-3ubuntu1.5+esm5",
        "2:7.4.1689-3ubuntu1.5+esm6",
        "2:7.4.1689-3ubuntu1.5+esm7",
        "2:7.4.1689-3ubuntu1.5+esm8",
        "2:7.4.1689-3ubuntu1.5+esm10",
        "2:7.4.1689-3ubuntu1.5+esm11",
        "2:7.4.1689-3ubuntu1.5+esm12",
        "2:7.4.1689-3ubuntu1.5+esm13",
        "2:7.4.1689-3ubuntu1.5+esm14",
        "2:7.4.1689-3ubuntu1.5+esm15",
        "2:7.4.1689-3ubuntu1.5+esm17",
        "2:7.4.1689-3ubuntu1.5+esm18",
        "2:7.4.1689-3ubuntu1.5+esm19",
        "2:7.4.1689-3ubuntu1.5+esm20"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.0.1453-1ubuntu1.13+esm7?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.0.1453-1ubuntu1.13+esm7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.0.0197-4ubuntu5",
        "2:8.0.1144-1ubuntu1",
        "2:8.0.1401-1ubuntu1",
        "2:8.0.1401-1ubuntu2",
        "2:8.0.1401-1ubuntu3",
        "2:8.0.1453-1ubuntu1",
        "2:8.0.1453-1ubuntu1.1",
        "2:8.0.1453-1ubuntu1.3",
        "2:8.0.1453-1ubuntu1.4",
        "2:8.0.1453-1ubuntu1.6",
        "2:8.0.1453-1ubuntu1.7",
        "2:8.0.1453-1ubuntu1.8",
        "2:8.0.1453-1ubuntu1.9",
        "2:8.0.1453-1ubuntu1.10",
        "2:8.0.1453-1ubuntu1.11",
        "2:8.0.1453-1ubuntu1.12",
        "2:8.0.1453-1ubuntu1.13",
        "2:8.0.1453-1ubuntu1.13+esm1",
        "2:8.0.1453-1ubuntu1.13+esm3",
        "2:8.0.1453-1ubuntu1.13+esm4",
        "2:8.0.1453-1ubuntu1.13+esm5",
        "2:8.0.1453-1ubuntu1.13+esm6"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5.21?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.1.2269-1ubuntu5.21"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.1.0875-5ubuntu2",
        "2:8.1.0875-5ubuntu3",
        "2:8.1.0875-5ubuntu4",
        "2:8.1.2269-1ubuntu1",
        "2:8.1.2269-1ubuntu4",
        "2:8.1.2269-1ubuntu5",
        "2:8.1.2269-1ubuntu5.3",
        "2:8.1.2269-1ubuntu5.4",
        "2:8.1.2269-1ubuntu5.6",
        "2:8.1.2269-1ubuntu5.7",
        "2:8.1.2269-1ubuntu5.8",
        "2:8.1.2269-1ubuntu5.9",
        "2:8.1.2269-1ubuntu5.11",
        "2:8.1.2269-1ubuntu5.12",
        "2:8.1.2269-1ubuntu5.13",
        "2:8.1.2269-1ubuntu5.14",
        "2:8.1.2269-1ubuntu5.15",
        "2:8.1.2269-1ubuntu5.16",
        "2:8.1.2269-1ubuntu5.17",
        "2:8.1.2269-1ubuntu5.18",
        "2:8.1.2269-1ubuntu5.20"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.2.3995-1ubuntu2.15?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.2.3995-1ubuntu2.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.2.2434-3ubuntu3",
        "2:8.2.2434-3ubuntu4",
        "2:8.2.3565-1ubuntu1",
        "2:8.2.3565-1ubuntu2",
        "2:8.2.3565-1ubuntu3",
        "2:8.2.3565-1ubuntu5",
        "2:8.2.3995-1ubuntu1",
        "2:8.2.3995-1ubuntu2",
        "2:8.2.3995-1ubuntu2.1",
        "2:8.2.3995-1ubuntu2.3",
        "2:8.2.3995-1ubuntu2.4",
        "2:8.2.3995-1ubuntu2.5",
        "2:8.2.3995-1ubuntu2.7",
        "2:8.2.3995-1ubuntu2.8",
        "2:8.2.3995-1ubuntu2.9",
        "2:8.2.3995-1ubuntu2.10",
        "2:8.2.3995-1ubuntu2.11",
        "2:8.2.3995-1ubuntu2.12",
        "2:8.2.3995-1ubuntu2.13"
      ]
    }
  ],
  "aliases": [],
  "details": "Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used again in `src/cmdhist.c` at line 759. When using the `:history` command, it\u0027s possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068.",
  "id": "UBUNTU-CVE-2023-46246",
  "modified": "2025-09-08T16:56:33Z",
  "published": "2023-10-27T19:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-46246"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6557-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46246"
    }
  ],
  "related": [
    "USN-6557-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2023-46246"
  ]
}

CVE-2023-46246 (GCVE-0-2023-46246)

Vulnerability from cvelistv5 – Published: 2023-10-27 18:36 – Updated: 2026-06-23 17:19

Title

Integer Overflow in :history command in Vim

Summary

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used again in `src/cmdhist.c` at line 759. When using the `:history` command, it's possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068.

Severity

4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2023-12-14 19:44 UTC

CWE

CWE-416 - Use After Free
CWE-190 - Integer Overflow or Wraparound

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vim/vim/security/advisories/GH…	x_refsource_CONFIRM
https://github.com/vim/vim/commit/9198c1f2b1ddecd…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2023120…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…

Impacted products

1 product

Vendor	Product	Version
vim	vim	Affected: <= 9.0.2067

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T20:37:40.133Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm"
          },
          {
            "name": "https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231208-0006/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNMFS3IH74KEMMESOA3EOB6MZ56TWGFF/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVA7K73WHQH4KVFDJQ7ELIUD2WK5ZT5E/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-46246",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-12-14T19:44:23.601809Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-23T17:19:09.629Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim",
          "vendor": "vim",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 9.0.2067"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used again in `src/cmdhist.c` at line 759. When using the `:history` command, it\u0027s possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-17T02:06:15.239Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm"
        },
        {
          "name": "https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231208-0006/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNMFS3IH74KEMMESOA3EOB6MZ56TWGFF/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVA7K73WHQH4KVFDJQ7ELIUD2WK5ZT5E/"
        }
      ],
      "source": {
        "advisory": "GHSA-q22m-h7m2-9mgm",
        "discovery": "UNKNOWN"
      },
      "title": "Integer Overflow in :history command in Vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2023-46246",
    "datePublished": "2023-10-27T18:36:23.907Z",
    "dateReserved": "2023-10-19T20:34:00.948Z",
    "dateUpdated": "2026-06-23T17:19:09.629Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

USN-6557-1 (UBUNTU-CVE-2022-1725)

Vulnerability from osv_ubuntu – Published: 2023-12-14 17:31 – Updated: 2026-06-29 10:53 – Source website

Summary

vim vulnerabilities

Details

It was discovered that Vim could be made to dereference invalid memory. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1725)

It was discovered that Vim could be made to recurse infinitely. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)

It was discovered that Vim could be made to write out of bounds with a put command. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1886)

It was discovered that Vim could be made to write out of bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897, CVE-2022-2000)

It was discovered that Vim did not properly manage memory in the spell command. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-2042)

It was discovered that Vim did not properly manage memory. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-46246, CVE-2023-48231)

It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)

It was discovered that Vim contained multiple arithmetic overflows. An attacker could possibly use these issues to cause a denial of service. (CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236, CVE-2023-48237)

It was discovered that Vim did not properly manage memory in the substitute command. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)

References

URL

Type

	https://ubuntu.com/security/notices/USN-6557-1	ADVISORY
	https://ubuntu.com/security/CVE-2022-1725	REPORT
	https://ubuntu.com/security/CVE-2022-1771	REPORT
	https://ubuntu.com/security/CVE-2022-1886	REPORT
	https://ubuntu.com/security/CVE-2022-1897	REPORT
	https://ubuntu.com/security/CVE-2022-2000	REPORT
	https://ubuntu.com/security/CVE-2022-2042	REPORT
	https://ubuntu.com/security/CVE-2023-46246	REPORT
	https://ubuntu.com/security/CVE-2023-48231	REPORT
	https://ubuntu.com/security/CVE-2023-48232	REPORT
	https://ubuntu.com/security/CVE-2023-48233	REPORT
	https://ubuntu.com/security/CVE-2023-48234	REPORT
	https://ubuntu.com/security/CVE-2023-48235	REPORT
	https://ubuntu.com/security/CVE-2023-48236	REPORT
	https://ubuntu.com/security/CVE-2023-48237	REPORT
	https://ubuntu.com/security/CVE-2023-48706	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1771",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1897",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-2000",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-2042",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-46246",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48231",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48233",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48234",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48235",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48236",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48237",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-lesstif",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:7.4.052-1ubuntu3.1+esm15?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:7.4.052-1ubuntu3.1+esm15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:7.4.000-1ubuntu2",
        "2:7.4.052-1ubuntu1",
        "2:7.4.052-1ubuntu2",
        "2:7.4.052-1ubuntu3",
        "2:7.4.052-1ubuntu3.1",
        "2:7.4.052-1ubuntu3.1+esm1",
        "2:7.4.052-1ubuntu3.1+esm3",
        "2:7.4.052-1ubuntu3.1+esm4",
        "2:7.4.052-1ubuntu3.1+esm5",
        "2:7.4.052-1ubuntu3.1+esm6",
        "2:7.4.052-1ubuntu3.1+esm7",
        "2:7.4.052-1ubuntu3.1+esm8",
        "2:7.4.052-1ubuntu3.1+esm9",
        "2:7.4.052-1ubuntu3.1+esm10",
        "2:7.4.052-1ubuntu3.1+esm11",
        "2:7.4.052-1ubuntu3.1+esm12",
        "2:7.4.052-1ubuntu3.1+esm13",
        "2:7.4.052-1ubuntu3.1+esm14"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1771",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-46246",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48231",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48233",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48234",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48235",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48236",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48237",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-athena-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gnome-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gtk3-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-nox-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:7.4.1689-3ubuntu1.5+esm22?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:7.4.1689-3ubuntu1.5+esm22"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:7.4.712-2ubuntu4",
        "2:7.4.826-1ubuntu1",
        "2:7.4.826-1ubuntu2",
        "2:7.4.826-1ubuntu3",
        "2:7.4.963-1ubuntu1",
        "2:7.4.963-1ubuntu4",
        "2:7.4.963-1ubuntu5",
        "2:7.4.1689-3ubuntu1",
        "2:7.4.1689-3ubuntu1.1",
        "2:7.4.1689-3ubuntu1.2",
        "2:7.4.1689-3ubuntu1.3",
        "2:7.4.1689-3ubuntu1.4",
        "2:7.4.1689-3ubuntu1.5",
        "2:7.4.1689-3ubuntu1.5+esm2",
        "2:7.4.1689-3ubuntu1.5+esm3",
        "2:7.4.1689-3ubuntu1.5+esm4",
        "2:7.4.1689-3ubuntu1.5+esm5",
        "2:7.4.1689-3ubuntu1.5+esm6",
        "2:7.4.1689-3ubuntu1.5+esm7",
        "2:7.4.1689-3ubuntu1.5+esm8",
        "2:7.4.1689-3ubuntu1.5+esm10",
        "2:7.4.1689-3ubuntu1.5+esm11",
        "2:7.4.1689-3ubuntu1.5+esm12",
        "2:7.4.1689-3ubuntu1.5+esm13",
        "2:7.4.1689-3ubuntu1.5+esm14",
        "2:7.4.1689-3ubuntu1.5+esm15",
        "2:7.4.1689-3ubuntu1.5+esm17",
        "2:7.4.1689-3ubuntu1.5+esm18",
        "2:7.4.1689-3ubuntu1.5+esm19",
        "2:7.4.1689-3ubuntu1.5+esm20"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1725",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1771",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1897",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-2000",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-2042",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-46246",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48231",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48233",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48234",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48235",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48236",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48237",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gnome",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.0.1453-1ubuntu1.13+esm7?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.0.1453-1ubuntu1.13+esm7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.0.0197-4ubuntu5",
        "2:8.0.1144-1ubuntu1",
        "2:8.0.1401-1ubuntu1",
        "2:8.0.1401-1ubuntu2",
        "2:8.0.1401-1ubuntu3",
        "2:8.0.1453-1ubuntu1",
        "2:8.0.1453-1ubuntu1.1",
        "2:8.0.1453-1ubuntu1.3",
        "2:8.0.1453-1ubuntu1.4",
        "2:8.0.1453-1ubuntu1.6",
        "2:8.0.1453-1ubuntu1.7",
        "2:8.0.1453-1ubuntu1.8",
        "2:8.0.1453-1ubuntu1.9",
        "2:8.0.1453-1ubuntu1.10",
        "2:8.0.1453-1ubuntu1.11",
        "2:8.0.1453-1ubuntu1.12",
        "2:8.0.1453-1ubuntu1.13",
        "2:8.0.1453-1ubuntu1.13+esm1",
        "2:8.0.1453-1ubuntu1.13+esm3",
        "2:8.0.1453-1ubuntu1.13+esm4",
        "2:8.0.1453-1ubuntu1.13+esm5",
        "2:8.0.1453-1ubuntu1.13+esm6"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1725",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1771",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1897",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-2000",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-2042",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-46246",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48231",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48233",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48234",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48235",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48236",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48237",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5.21?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.1.2269-1ubuntu5.21"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.1.0875-5ubuntu2",
        "2:8.1.0875-5ubuntu3",
        "2:8.1.0875-5ubuntu4",
        "2:8.1.2269-1ubuntu1",
        "2:8.1.2269-1ubuntu4",
        "2:8.1.2269-1ubuntu5",
        "2:8.1.2269-1ubuntu5.3",
        "2:8.1.2269-1ubuntu5.4",
        "2:8.1.2269-1ubuntu5.6",
        "2:8.1.2269-1ubuntu5.7",
        "2:8.1.2269-1ubuntu5.8",
        "2:8.1.2269-1ubuntu5.9",
        "2:8.1.2269-1ubuntu5.11",
        "2:8.1.2269-1ubuntu5.12",
        "2:8.1.2269-1ubuntu5.13",
        "2:8.1.2269-1ubuntu5.14",
        "2:8.1.2269-1ubuntu5.15",
        "2:8.1.2269-1ubuntu5.16",
        "2:8.1.2269-1ubuntu5.17",
        "2:8.1.2269-1ubuntu5.18",
        "2:8.1.2269-1ubuntu5.20"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1725",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1771",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1886",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1897",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-2000",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-2042",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-46246",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48231",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48233",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48234",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48235",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48236",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48237",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-48706",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "vim",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-athena",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-common",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-nox",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          },
          {
            "binary_name": "xxd",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "vim",
        "purl": "pkg:deb/ubuntu/vim@2:8.2.3995-1ubuntu2.15?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:8.2.3995-1ubuntu2.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:8.2.2434-3ubuntu3",
        "2:8.2.2434-3ubuntu4",
        "2:8.2.3565-1ubuntu1",
        "2:8.2.3565-1ubuntu2",
        "2:8.2.3565-1ubuntu3",
        "2:8.2.3565-1ubuntu5",
        "2:8.2.3995-1ubuntu1",
        "2:8.2.3995-1ubuntu2",
        "2:8.2.3995-1ubuntu2.1",
        "2:8.2.3995-1ubuntu2.3",
        "2:8.2.3995-1ubuntu2.4",
        "2:8.2.3995-1ubuntu2.5",
        "2:8.2.3995-1ubuntu2.7",
        "2:8.2.3995-1ubuntu2.8",
        "2:8.2.3995-1ubuntu2.9",
        "2:8.2.3995-1ubuntu2.10",
        "2:8.2.3995-1ubuntu2.11",
        "2:8.2.3995-1ubuntu2.12",
        "2:8.2.3995-1ubuntu2.13"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n",
  "id": "USN-6557-1",
  "modified": "2026-06-29T10:53:06Z",
  "published": "2023-12-14T17:31:12Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6557-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1725"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1771"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1886"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1897"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-2000"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-2042"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-46246"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48231"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48232"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48233"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48234"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48235"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48236"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48237"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-48706"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "vim vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2022-1725",
    "UBUNTU-CVE-2022-1771",
    "UBUNTU-CVE-2022-1886",
    "UBUNTU-CVE-2022-1897",
    "UBUNTU-CVE-2022-2000",
    "UBUNTU-CVE-2022-2042",
    "UBUNTU-CVE-2023-46246",
    "UBUNTU-CVE-2023-48231",
    "UBUNTU-CVE-2023-48232",
    "UBUNTU-CVE-2023-48233",
    "UBUNTU-CVE-2023-48234",
    "UBUNTU-CVE-2023-48235",
    "UBUNTU-CVE-2023-48236",
    "UBUNTU-CVE-2023-48237",
    "UBUNTU-CVE-2023-48706"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2023-46246 (CVE-2023-46246)

CVE-2023-46246 (GCVE-0-2023-46246)

USN-6557-1 (UBUNTU-CVE-2022-1725)

Tags

Sightings

Nomenclature

Related by attack behaviour