CVE-2023-4736: Untrusted Search Path in vim/vim
Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.
Other sources
Vim. A use-after-free issue was addressed with improved memory management.
— Apple
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apple macOSto a version that resolves this vulnerability.Fixed in 14.1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-30774
- CVE-2023-40444
- CVE-2023-42952
- CVE-2023-42945
- CVE-2023-41072
- CVE-2023-42857
- CVE-2023-40449
- CVE-2023-42823
- CVE-2023-41989
- CVE-2023-42854
- CVE-2023-40413
- CVE-2023-42834
- CVE-2023-42844
- CVE-2023-42953
- CVE-2023-40416
- CVE-2023-42848
- CVE-2023-40423
- CVE-2023-38403
- CVE-2023-42849
- CVE-2023-42850
- CVE-2023-40446
- CVE-2023-42942
- CVE-2023-42861
- CVE-2023-42935
- CVE-2023-40408
- CVE-2023-40405
- CVE-2023-28826
- CVE-2023-42856
- CVE-2023-40404
- CVE-2023-42859
- CVE-2023-42877
- CVE-2023-42840
- CVE-2023-42853
- CVE-2023-42860
- CVE-2023-42889
- CVE-2023-42847
- CVE-2023-42845
- CVE-2023-42841
- CVE-2023-42873
- CVE-2023-42838
- CVE-2023-42835
- CVE-2023-41977
- CVE-2023-42438
- CVE-2023-42836
- CVE-2023-42839
- CVE-2023-42878
- CVE-2023-41982
- CVE-2023-41997
- CVE-2023-41988
- CVE-2023-42946
- CVE-2023-36191
- CVE-2023-40421
- CVE-2023-42842
- CVE-2023-4733
- CVE-2023-4734
- CVE-2023-4735
- CVE-2023-4736
- CVE-2023-4738
- CVE-2023-4750
- CVE-2023-4751
- CVE-2023-4752
- CVE-2023-4781
- CVE-2023-41254
- CVE-2023-40447
- CVE-2023-41976
- CVE-2023-42852
- CVE-2023-42843
- CVE-2023-41983
- CVE-2023-41975
- CVE-2023-42858
Frequently Asked Questions
What is the severity of CVE-2023-4736?
The severity of CVE-2023-4736 is high.
What is the description of CVE-2023-4736?
CVE-2023-4736 is a vulnerability in the GitHub repository vim/vim prior to 9.0.1833, which allows an attacker to exploit an untrusted search path.
How does CVE-2023-4736 affect Vim?
CVE-2023-4736 affects Vim versions prior to 9.0.1833.
How can I fix CVE-2023-4736?
To fix CVE-2023-4736, update Vim to version 9.0.1833 or above.
Where can I find more information about CVE-2023-4736?
You can find more information about CVE-2023-4736 at the following references: [Reference 1](https://github.com/vim/vim/commit/816fbcc262687b81fc46f82f7bbeb1453addfe0c), [Reference 2](https://huntr.dev/bounties/e1ce0995-4df4-4dec-9cd7-3136ac3e8e71).