Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.13.2023.004.01
Category:Slackware Local Security Checks
Title:Slackware: Security Advisory (SSA:2023-004-01)
Summary:The remote host is missing an update for the 'vim' package(s) announced via the SSA:2023-004-01 advisory.
Description:Summary:
The remote host is missing an update for the 'vim' package(s) announced via the SSA:2023-004-01 advisory.

Vulnerability Insight:
New vim packages are available for Slackware 15.0 and -current to
fix security issues.


Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/vim-9.0.1146-i586-1_slack15.0.txz: Upgraded.
Fixed security issues:
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
For more information, see:
[links moved to references]
(* Security fix *)
patches/packages/vim-gvim-9.0.1146-i586-1_slack15.0.txz: Upgraded.
+--------------------------+

Affected Software/OS:
'vim' package(s) on Slackware 15.0, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
7.2

CVSS Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2023-0049
https://huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3Y752EAVACVC5XY2TMGGOAIU25VQRPDW/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T33LLWHLH63XDCO5OME7NWN63RA4U5HF/
http://seclists.org/fulldisclosure/2023/Mar/17
https://security.gentoo.org/glsa/202305-16
https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c
Common Vulnerability Exposure (CVE) ID: CVE-2023-0051
https://huntr.dev/bounties/1c8686db-baa6-42dc-ba45-aed322802de9
https://github.com/vim/vim/commit/c32949b0779106ed5710ae3bffc5053e49083ab4
CopyrightCopyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.