CVE-2023-4752 - Use After Free in vim/vim

Back Back to CVE browser

HIGH

Use After Free in vim/vim

Published Sep 4, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.56%

Description

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

Affected products

Vendor Vim Product Vim/vim Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <9.0.1858

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Vim

Vim/vim

n/a

Version	Status	Constraints
unspecified	affected	<9.0.1858

Red Hat Discovery 1.14

discovery/discovery-ui-rhel9:1.14.2-1748467619

Fixed · RHSA-2025:8385
Red Hat Enterprise Linux 9

vim-2:8.2.2637-22.el9_6

Fixed · RHSA-2025:7440
Red Hat Enterprise Linux 9

vim-2:8.2.2637-22.el9_6

Fixed · RHSA-2025:7440
Red Hat Enterprise Linux 8

vim

Will not fix

Product	Package	State	Advisory
Red Hat Discovery 1.14	discovery/discovery-ui-rhel9:1.14.2-1748467619	Fixed	RHSA-2025:8385
Red Hat Enterprise Linux 9	vim-2:8.2.2637-22.el9_6	Fixed	RHSA-2025:7440
Red Hat Enterprise Linux 9	vim-2:8.2.2637-22.el9_6	Fixed	RHSA-2025:7440
Red Hat Enterprise Linux 8	vim	Will not fix	n/a

Remediation

Red Hat statement

Red Hat Product Security has rated this issue as having a Low security impact, because the "victim" has to run an untrusted file IN SCRIPT MODE. Someone who is running untrusted files in script mode is equivalent to someone just taking a random python script and running it.

Weaknesses (1)

CWE-416

Use After Free

References (13)

http://seclists.org/fulldisclosure/2023/Oct/24
Mailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2023-4752
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2237311
Issue Tracking
https://github.com/vim/vim/commit/ee9166eb3b41846661a39b662dc7ebe8b5e15139
Patch
https://huntr.dev/bounties/85f62dd7-ed84-4fa2-b265-8a369a318757
ExploitIssue TrackingPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00035.html
Mailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html
Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I56ITJAFMFAQ2G3BMGTCGM3GS62V2DTR/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/
Mailing List
https://nvd.nist.gov/vuln/detail/CVE-2023-4752
https://support.apple.com/kb/HT213984
Release NotesThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-4752

Link	Providers	Tags
http://seclists.org/fulldisclosure/2023/Oct/24		Mailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2023-4752		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2237311		Issue Tracking
https://github.com/vim/vim/commit/ee9166eb3b41846661a39b662dc7ebe8b5e15139		Patch
https://huntr.dev/bounties/85f62dd7-ed84-4fa2-b265-8a369a318757		ExploitIssue TrackingPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00035.html		Mailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html		Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I56ITJAFMFAQ2G3BMGTCGM3GS62V2DTR/		Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/		Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/		Mailing List
https://nvd.nist.gov/vuln/detail/CVE-2023-4752
https://support.apple.com/kb/HT213984		Release NotesThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-4752