CVE-2023-3896 - OpenCVE

Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Vim	Vim

Configuration 1 [-]

cpe:2.3:a:vim:vim:9.0.1367:*:*:*:*:*:*:*

References

Link	Resource
https://github.com/vim/vim/issues/12528	Exploit Issue Tracking Patch Vendor Advisory
https://github.com/vim/vim/pull/12540	Patch Vendor Advisory
https://security.netapp.com/advisory/ntap-20230831-0012/

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: OpenCloudOS

Published: 2023-08-07T12:13:37.229Z

Updated: 2023-08-07T12:13:37.229Z

Reserved: 2023-07-25T03:11:49.115Z

Link: CVE-2023-3896

JSON object: View

NVD Information

Status : Modified

Published: 2023-08-07T13:15:12.927

Modified: 2023-08-31T19:15:11.223

Link: CVE-2023-3896

JSON object: View

Redhat Information

No data.

CWE

CWE-369

{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"cveId": "CVE-2023-3896", "assignerOrgId": "03686db1-8513-43c4-b487-c6ad847afd3a", "state": "PUBLISHED", "assignerShortName": "OpenCloudOS", "dateReserved": "2023-07-25T03:11:49.115Z", "datePublished": "2023-08-07T12:13:37.229Z", "dateUpdated": "2023-08-07T12:13:37.229Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "VIM", "platforms": ["Linux", "x86", "64 bit", "32 bit"], "product": "OpenCloudOS Stream", "repo": "https://gitee.com/opencloudos-stream/vim", "vendor": "OpenCloudOS", "versions": [{"lessThanOrEqual": "9.0.1367-3", "status": "affected", "version": "9.0.1367-1", "versionType": "git"}]}], "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "fullwaywang (Tencent Yunding Lab)"}], "datePublic": "2023-08-07T10:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3</span><br>"}], "value": "Divide By Zero in vim/vim from\u00a09.0.1367-1 to\u00a09.0.1367-3\n"}], "impacts": [{"capecId": "CAPEC-103", "descriptions": [{"lang": "en", "value": "CAPEC-103 Clickjacking"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-369", "description": "CWE-369 Divide By Zero", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "03686db1-8513-43c4-b487-c6ad847afd3a", "shortName": "OpenCloudOS", "dateUpdated": "2023-08-07T12:13:37.229Z"}, "references": [{"url": "https://github.com/vim/vim/issues/12528"}, {"url": "https://github.com/vim/vim/pull/12540"}, {"url": "https://security.netapp.com/advisory/ntap-20230831-0012/"}], "source": {"discovery": "UNKNOWN"}, "title": "A divide by zero issue existed in vim of OpenCloudOS Stream", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}}}