UBUNTU-CVE-2023-48233

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2023-48233

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48233.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-48233

Upstream

CVE-2023-48233

Downstream

USN-6557-1

Related

USN-6557-1

Published

2023-11-16T23:15:00Z

Modified

2025-07-16T07:20:49.005575Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
2.8 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
Ubuntu - low

Summary

[none]

Details

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, abort with evaluetoo_large. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit ac6378773 which has been included in release version 9.0.2108. Users are advised to upgrade. There are no known workarounds for this vulnerability.

References

Affected packages

Ubuntu:Pro:14.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:7.4.052-1ubuntu3.1+esm15?arch=source&distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:7.4.052-1ubuntu3.1+esm15

Affected versions

2:7.*

2:7.4.000-1ubuntu2

2:7.4.052-1ubuntu1

2:7.4.052-1ubuntu2

2:7.4.052-1ubuntu3

2:7.4.052-1ubuntu3.1

2:7.4.052-1ubuntu3.1+esm1

2:7.4.052-1ubuntu3.1+esm3

2:7.4.052-1ubuntu3.1+esm4

2:7.4.052-1ubuntu3.1+esm5

2:7.4.052-1ubuntu3.1+esm6

2:7.4.052-1ubuntu3.1+esm7

2:7.4.052-1ubuntu3.1+esm8

2:7.4.052-1ubuntu3.1+esm9

2:7.4.052-1ubuntu3.1+esm10

2:7.4.052-1ubuntu3.1+esm11

2:7.4.052-1ubuntu3.1+esm12

2:7.4.052-1ubuntu3.1+esm13

2:7.4.052-1ubuntu3.1+esm14

Ecosystem specific

{
    "priority_reason": "Requires user interaction",
    "binaries": [
        {
            "binary_name": "vim",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-athena-dbgsym",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-common-dbgsym",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-dbg",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-dbgsym",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-doc",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-gnome-dbgsym",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-gtk-dbgsym",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-lesstif",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-nox-dbgsym",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        },
        {
            "binary_name": "vim-tiny-dbgsym",
            "binary_version": "2:7.4.052-1ubuntu3.1+esm15"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:Pro:16.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:7.4.1689-3ubuntu1.5+esm22?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:7.4.1689-3ubuntu1.5+esm22

Affected versions

2:7.*

2:7.4.712-2ubuntu4

2:7.4.826-1ubuntu1

2:7.4.826-1ubuntu2

2:7.4.826-1ubuntu3

2:7.4.963-1ubuntu1

2:7.4.963-1ubuntu4

2:7.4.963-1ubuntu5

2:7.4.1689-3ubuntu1

2:7.4.1689-3ubuntu1.1

2:7.4.1689-3ubuntu1.2

2:7.4.1689-3ubuntu1.3

2:7.4.1689-3ubuntu1.4

2:7.4.1689-3ubuntu1.5

2:7.4.1689-3ubuntu1.5+esm2

2:7.4.1689-3ubuntu1.5+esm3

2:7.4.1689-3ubuntu1.5+esm4

2:7.4.1689-3ubuntu1.5+esm5

2:7.4.1689-3ubuntu1.5+esm6

2:7.4.1689-3ubuntu1.5+esm7

2:7.4.1689-3ubuntu1.5+esm8

2:7.4.1689-3ubuntu1.5+esm10

2:7.4.1689-3ubuntu1.5+esm11

2:7.4.1689-3ubuntu1.5+esm12

2:7.4.1689-3ubuntu1.5+esm13

2:7.4.1689-3ubuntu1.5+esm14

2:7.4.1689-3ubuntu1.5+esm15

2:7.4.1689-3ubuntu1.5+esm17

2:7.4.1689-3ubuntu1.5+esm18

2:7.4.1689-3ubuntu1.5+esm19

2:7.4.1689-3ubuntu1.5+esm20

Ecosystem specific

{
    "priority_reason": "Requires user interaction",
    "binaries": [
        {
            "binary_name": "vim",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-athena",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-athena-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-athena-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-athena-py2-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-common",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-common-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-doc",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gnome",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gnome-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gnome-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gnome-py2-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gtk",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gtk-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gtk-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gtk-py2-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gtk3",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gtk3-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gtk3-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gtk3-py2-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-gui-common",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-nox",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-nox-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-nox-py2",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-nox-py2-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-runtime",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-tiny",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        },
        {
            "binary_name": "vim-tiny-dbgsym",
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm22"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:Pro:18.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:8.0.1453-1ubuntu1.13+esm7?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.0.1453-1ubuntu1.13+esm7

Affected versions

2:8.*

2:8.0.0197-4ubuntu5

2:8.0.1144-1ubuntu1

2:8.0.1401-1ubuntu1

2:8.0.1401-1ubuntu2

2:8.0.1401-1ubuntu3

2:8.0.1453-1ubuntu1

2:8.0.1453-1ubuntu1.1

2:8.0.1453-1ubuntu1.3

2:8.0.1453-1ubuntu1.4

2:8.0.1453-1ubuntu1.6

2:8.0.1453-1ubuntu1.7

2:8.0.1453-1ubuntu1.8

2:8.0.1453-1ubuntu1.9

2:8.0.1453-1ubuntu1.10

2:8.0.1453-1ubuntu1.11

2:8.0.1453-1ubuntu1.12

2:8.0.1453-1ubuntu1.13

2:8.0.1453-1ubuntu1.13+esm1

2:8.0.1453-1ubuntu1.13+esm3

2:8.0.1453-1ubuntu1.13+esm4

2:8.0.1453-1ubuntu1.13+esm5

2:8.0.1453-1ubuntu1.13+esm6

Ecosystem specific

{
    "priority_reason": "Requires user interaction",
    "binaries": [
        {
            "binary_name": "vim",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-athena",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-athena-dbgsym",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-common",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-dbgsym",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-doc",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-gnome",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-gtk-dbgsym",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-gtk3-dbgsym",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-nox",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-nox-dbgsym",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "vim-tiny-dbgsym",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "xxd",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        },
        {
            "binary_name": "xxd-dbgsym",
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm7"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:20.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5.21?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.2269-1ubuntu5.21

Affected versions

2:8.*

2:8.1.0875-5ubuntu2

2:8.1.0875-5ubuntu3

2:8.1.0875-5ubuntu4

2:8.1.2269-1ubuntu1

2:8.1.2269-1ubuntu4

2:8.1.2269-1ubuntu5

2:8.1.2269-1ubuntu5.3

2:8.1.2269-1ubuntu5.4

2:8.1.2269-1ubuntu5.6

2:8.1.2269-1ubuntu5.7

2:8.1.2269-1ubuntu5.8

2:8.1.2269-1ubuntu5.9

2:8.1.2269-1ubuntu5.11

2:8.1.2269-1ubuntu5.12

2:8.1.2269-1ubuntu5.13

2:8.1.2269-1ubuntu5.14

2:8.1.2269-1ubuntu5.15

2:8.1.2269-1ubuntu5.16

2:8.1.2269-1ubuntu5.17

2:8.1.2269-1ubuntu5.18

2:8.1.2269-1ubuntu5.20

Ecosystem specific

{
    "priority_reason": "Requires user interaction",
    "binaries": [
        {
            "binary_name": "vim",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-athena",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-athena-dbgsym",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-common",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-dbgsym",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-doc",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-gtk3-dbgsym",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-nox",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-nox-dbgsym",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "vim-tiny-dbgsym",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "xxd",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        },
        {
            "binary_name": "xxd-dbgsym",
            "binary_version": "2:8.1.2269-1ubuntu5.21"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:22.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:8.2.3995-1ubuntu2.15?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.2.3995-1ubuntu2.15

Affected versions

2:8.*

2:8.2.2434-3ubuntu3

2:8.2.2434-3ubuntu4

2:8.2.3565-1ubuntu1

2:8.2.3565-1ubuntu2

2:8.2.3565-1ubuntu3

2:8.2.3565-1ubuntu5

2:8.2.3995-1ubuntu1

2:8.2.3995-1ubuntu2

2:8.2.3995-1ubuntu2.1

2:8.2.3995-1ubuntu2.3

2:8.2.3995-1ubuntu2.4

2:8.2.3995-1ubuntu2.5

2:8.2.3995-1ubuntu2.7

2:8.2.3995-1ubuntu2.8

2:8.2.3995-1ubuntu2.9

2:8.2.3995-1ubuntu2.10

2:8.2.3995-1ubuntu2.11

2:8.2.3995-1ubuntu2.12

2:8.2.3995-1ubuntu2.13

Ecosystem specific

{
    "priority_reason": "Requires user interaction",
    "binaries": [
        {
            "binary_name": "vim",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-athena",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-athena-dbgsym",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-common",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-dbgsym",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-doc",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-gtk",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-gtk3",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-gtk3-dbgsym",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-gui-common",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-nox",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-nox-dbgsym",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-runtime",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-tiny",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "vim-tiny-dbgsym",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "xxd",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        },
        {
            "binary_name": "xxd-dbgsym",
            "binary_version": "2:8.2.3995-1ubuntu2.15"
        }
    ],
    "availability": "No subscription required"
}