CVE-2023-4734: Integer Overflow or Wraparound in vim/vim
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
Other sources
Vim. A use-after-free issue was addressed with improved memory management.
— Apple
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.1.0496-1Fixed in 2:9.1.0709-1 - Upgrade
Upgrade
Apple macOSto a version that resolves this vulnerability.Fixed in 14.1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.1846 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.1.0496-1 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.1.0709-1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-30774
- CVE-2023-40444
- CVE-2023-42952
- CVE-2023-42945
- CVE-2023-41072
- CVE-2023-42857
- CVE-2023-40449
- CVE-2023-42823
- CVE-2023-41989
- CVE-2023-42854
- CVE-2023-40413
- CVE-2023-42834
- CVE-2023-42844
- CVE-2023-42953
- CVE-2023-40416
- CVE-2023-42848
- CVE-2023-40423
- CVE-2023-38403
- CVE-2023-42849
- CVE-2023-42850
- CVE-2023-40446
- CVE-2023-42942
- CVE-2023-42861
- CVE-2023-42935
- CVE-2023-40408
- CVE-2023-40405
- CVE-2023-28826
- CVE-2023-42856
- CVE-2023-40404
- CVE-2023-42859
- CVE-2023-42877
- CVE-2023-42840
- CVE-2023-42853
- CVE-2023-42860
- CVE-2023-42889
- CVE-2023-42847
- CVE-2023-42845
- CVE-2023-42841
- CVE-2023-42873
- CVE-2023-42838
- CVE-2023-42835
- CVE-2023-41977
- CVE-2023-42438
- CVE-2023-42836
- CVE-2023-42839
- CVE-2023-42878
- CVE-2023-41982
- CVE-2023-41997
- CVE-2023-41988
- CVE-2023-42946
- CVE-2023-36191
- CVE-2023-40421
- CVE-2023-42842
- CVE-2023-4733
- CVE-2023-4734
- CVE-2023-4735
- CVE-2023-4736
- CVE-2023-4738
- CVE-2023-4750
- CVE-2023-4751
- CVE-2023-4752
- CVE-2023-4781
- CVE-2023-41254
- CVE-2023-40447
- CVE-2023-41976
- CVE-2023-42852
- CVE-2023-42843
- CVE-2023-41983
- CVE-2023-41975
- CVE-2023-42858
Frequently Asked Questions
What is the severity of CVE-2023-4734?
The severity of CVE-2023-4734 is high.
What is the affected software of CVE-2023-4734?
The affected software of CVE-2023-4734 is Vim Vim versions prior to 9.0.1846.
How can I fix CVE-2023-4734?
To fix CVE-2023-4734, update Vim Vim to version 9.0.1846 or later.
What is the Common Weakness Enumeration (CWE) ID of CVE-2023-4734?
The Common Weakness Enumeration (CWE) ID of CVE-2023-4734 is CWE-190.
Where can I find more information about CVE-2023-4734?
You can find more information about CVE-2023-4734 at the following references: [GitHub Commit](https://github.com/vim/vim/commit/4c6fe2e2ea62469642ed1d80b16d39e616b25cf5), [Huntr Bounties](https://huntr.dev/bounties/688e4382-d2b6-439a-a54e-484780f82217).