Skip to content

overflow with count for :s command

Low
chrisbra published GHSA-3xx4-hcq6-r2vj Nov 16, 2023

Package

Vim (Vim)

Affected versions

< v9.0.2108

Patched versions

v9.0.2108

Description

overflow with count for :s command

Date: 16.11.2023
Severity: Low

If the count after the :s command is larger than what fits into a
(signed) long variable, abort with e_value_too_large.

Impact is low, user interaction is required and a crash may not even happen.

The Vim project would like to thank Fabian Toepfer for reporting this issue
which is now fixed in Vim patch 9.0.2108.

Severity

Low
2.8
/ 10

CVSS base metrics

Attack vector
Local
Attack complexity
Low
Privileges required
Low
User interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CVE ID

CVE-2023-48233

Weaknesses

No CWEs