{"cves":[{"id":"CVE-2023-5341","published":"2023-11-19T10:15:00","updated_at":"2025-08-19T22:10:17.667402+00:00","description":"\nA heap use-after-free flaw was found in coders/bmp.c in ImageMagick.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc8324f71e531f1","https://ubuntu.com/security/notices/USN-6621-1","https://www.cve.org/CVERecord?id=CVE-2023-5341"],"bugs":[""],"patches":{"imagemagick":[]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","component":null,"pocket":"esm-apps"},{"release_codename":"upstream","status":"released","description":"7.1.1-36","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.13+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.16+esm10","component":null,"pocket":"esm-infra"},{"release_codename":"noble","status":"not-affected","description":"8:6.9.12.98+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8:6.9.12.98+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8:6.9.12.98+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8:6.9.12.98+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8:6.9.12.98+dfsg1-2","component":null,"pocket":"security"}]}],"notices_ids":["USN-6621-1"],"notices":[{"id":"USN-6621-1","title":"ImageMagick vulnerability","summary":"ImageMagick could be made to crash if it opened a specially crafted\nfile.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-02-01T17:45:01.471855","description":"It was discovered that ImageMagick incorrectly handled certain values when\nprocessing BMP files. An attacker could exploit this to cause a denial of\nservice.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"imagemagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-common","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-doc","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-8","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.13+esm7","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.16+esm10","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.16+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-5341"]}]},{"id":"CVE-2023-41102","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:14:41.345480+00:00","description":"\nAn issue was discovered in the captive portal in OpenNDS before version\n10.1.3. It has multiple memory leaks due to not freeing up allocated\nmemory. This may lead to a Denial-of-Service condition due to the\nconsumption of all available memory. Affected OpenNDS before version 10.1.3\nfixed in OpenWrt master and OpenWrt 23.05 on 23. November by updating\nOpenNDS to version 10.2.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/69dde77927b252e2a4347170504a785ac5d50c33 (v10.1.3)","https://www.cve.org/CVERecord?id=CVE-2023-41102"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059452"],"patches":{"opennds":[]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-41101","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:14:41.345480+00:00","description":"\nAn issue was discovered in the captive portal in OpenNDS before version\n10.1.3. get_query in http_microhttpd.c does not validate the length of the\nquery string of GET requests. This leads to a stack-based buffer overflow\nin versions 9.x and earlier, and to a heap-based buffer overflow in\nversions 10.x and later. Attackers may exploit the issue to crash OpenNDS\n(Denial-of-Service condition) or to inject and execute arbitrary bytecode\n(Remote Code Execution). Affected OpenNDS before version 10.1.3 fixed in\nOpenWrt master and OpenWrt 23.05 on 23. November by updating OpenNDS to\nversion 10.2.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/69dde77927b252e2a4347170504a785ac5d50c33 (v10.1.3)","https://www.cve.org/CVERecord?id=CVE-2023-41101"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059452"],"patches":{"opennds":[]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.0","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-38324","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:13:35.549287+00:00","description":"\nAn issue was discovered in OpenNDS before 10.1.2. It allows users to skip\nthe splash page sequence (and directly authenticate) when it is using the\ndefault FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive\nPortal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and\nOpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/cd4004fc3cf79c0f2bc0ee98db30d225d0b79bc9 (v10.1.2)","https://www.cve.org/CVERecord?id=CVE-2023-38324"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059451"],"patches":{"opennds":["upstream: https://github.com/openNDS/openNDS/pull/493/commits/b97bf3566071a8176c6e1add9af9abbfa6d89173"]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.0+dfsg-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"10.2.0+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-38322","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:13:35.549287+00:00","description":"\nAn issue was discovered in OpenNDS Captive Portal before version 10.1.2. It\nhas a do_binauth NULL pointer dereference that be triggered with a crafted\nGET HTTP request with a missing User-Agent HTTP header. Triggering this\nissue results in crashing OpenNDS (a Denial-of-Service condition). The\nissue occurs when the client is about to be authenticated, and can be\ntriggered only when the BinAuth option is set. Affected OpenNDS Captive\nPortal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and\nOpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/cd4004fc3cf79c0f2bc0ee98db30d225d0b79bc9 (v10.1.2)","https://www.cve.org/CVERecord?id=CVE-2023-38322"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059451"],"patches":{"opennds":[]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.1.3","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-38320","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:13:29.939904+00:00","description":"\nAn issue was discovered in OpenNDS Captive Portal before version 10.1.2. It\nhas a show_preauthpage NULL pointer dereference that can be triggered with\na crafted GET HTTP with a missing User-Agent header. Triggering this issue\nresults in crashing OpenNDS (a Denial-of-Service condition). This problem\nwas fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August\n2023 by updating OpenNDS to version 10.1.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/cd4004fc3cf79c0f2bc0ee98db30d225d0b79bc9 (v10.1.2)","https://www.cve.org/CVERecord?id=CVE-2023-38320"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059451"],"patches":{"opennds":[]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.1.3","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-38316","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:13:29.939904+00:00","description":"\nAn issue was discovered in OpenNDS Captive Portal before version 10.1.2.\nWhen the custom unescape callback is enabled, attackers can execute\narbitrary OS commands by inserting them into the URL portion of HTTP GET\nrequests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in\nOpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by\nupdating OpenNDS to version 10.1.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/cd4004fc3cf79c0f2bc0ee98db30d225d0b79bc9 (v10.1.2)","https://www.cve.org/CVERecord?id=CVE-2023-38316"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059451"],"patches":{"opennds":[]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.1.3","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-38315","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:13:29.939904+00:00","description":"\nAn issue was discovered in OpenNDS Captive Portal before version 10.1.2. It\nhas a try_to_authenticate NULL pointer dereference that can be triggered\nwith a crafted GET HTTP with a missing client token query string parameter.\nTriggering this issue results in crashing OpenNDS (a Denial-of-Service\ncondition). Affected OpenNDS Captive Portal before version 10.1.2 fixed in\nOpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by\nupdating OpenNDS to version 10.1.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/cd4004fc3cf79c0f2bc0ee98db30d225d0b79bc9 (v10.1.2)","https://www.cve.org/CVERecord?id=CVE-2023-38315"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059451"],"patches":{"opennds":[]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.1.3","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-38314","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:13:29.939904+00:00","description":"\nAn issue was discovered in OpenNDS Captive Portal before version 10.1.2. It\nhas a NULL pointer dereference in preauthenticated() that can be triggered\nwith a crafted GET HTTP request with a missing redirect query string\nparameter. Triggering this issue results in crashing OpenNDS (a\nDenial-of-Service condition). Affected OpenNDS Captive Portal before\nversion 10.1.2 fixed infixed in OpenWrt master, OpenWrt 23.05 and OpenWrt\n22.03 on28. August 2023 by updating OpenNDS to version 10.1.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/cd4004fc3cf79c0f2bc0ee98db30d225d0b79bc9 (v10.1.2)","https://www.cve.org/CVERecord?id=CVE-2023-38314"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059451"],"patches":{"opennds":[]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.1.3","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-38313","published":"2023-11-17T06:15:00","updated_at":"2025-08-26T00:13:29.939904+00:00","description":"\nAn issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a\ndo_binauth NULL pointer dereference that can be triggered with a crafted\nGET HTTP request with a missing client redirect query string parameter.\nTriggering this issue results in crashing openNDS (a Denial-of-Service\ncondition). The issue occurs when the client is about to be authenticated,\nand can be triggered only when the BinAuth option is set. Affected OpenNDS\nCaptive Portal before version 10.1.2 fixed infixed in OpenWrt master,\nOpenWrt 23.05 and OpenWrt 22.03 on28. August 2023 by updating OpenNDS to\nversion 10.1.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx","https://github.com/openNDS/openNDS/commit/cd4004fc3cf79c0f2bc0ee98db30d225d0b79bc9 (v10.1.2)","https://www.cve.org/CVERecord?id=CVE-2023-38313"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059451"],"patches":{"opennds":[]},"tags":{},"packages":[{"name":"opennds","source":"https://ubuntu.com/security/cve?package=opennds","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opennds","debian":"https://tracker.debian.org/pkg/opennds","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.1.3","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-5981","published":"2023-11-17T00:00:00","updated_at":"2025-08-26T00:19:15.224315+00:00","description":"\nA vulnerability was found that the response times to malformed ciphertexts\nin RSA-PSK ClientKeyExchange differ from response times of ciphertexts with\ncorrect PKCS#1 v1.5 padding.","ubuntu_description":"","notes":[{"author":"ccdm94","note":"in order to backport the patch for this CVE for xenial and earlier\nit is necessary to also include the changes from commit 4804febdd,\nwhich is also the fix for CVE-2018-16868, due to the use of function\n'gnutls_privkey_decrypt_data2' in the patch. However, to successfully\nadd the fix for CVE-2018-16868 it is required that the patch for\nCVE-2018-16869 also be applied to nettle, which is not possible for\nxenial and earlier due to it being too intrusive. Therefore, it will\nnot be possible to patch CVE-2023-5981 in xenial and earlier because\nit would also be considered too intrusive in this case."}],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://lists.gnupg.org/pipermail/gnutls-help/2023-November/004837.html","https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","https://ubuntu.com/security/notices/USN-6499-1","https://ubuntu.com/security/notices/USN-6499-2","https://www.cve.org/CVERecord?id=CVE-2023-5981"],"bugs":["https://gitlab.com/gnutls/gnutls/-/issues/1511"],"patches":{"gnutls28":["upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1787/diffs?commit_id=29d6298d0b04cfff970b993915db71ba3f580b6d"]},"tags":{},"packages":[{"name":"gnutls28","source":"https://ubuntu.com/security/cve?package=gnutls28","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gnutls28","debian":"https://tracker.debian.org/pkg/gnutls28","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"3.6.13-2ubuntu1.9","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.5.18-1ubuntu1.6+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.8.2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"3.7.3-4ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"3.7.8-5ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"3.8.1-4ubuntu1.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-6499-1","USN-6499-2"],"notices":[{"id":"USN-6499-1","title":"GnuTLS vulnerability","summary":"GnuTLS could be made to expose sensitive information over the network.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-11-21T15:29:41.854040","description":"It was discovered that GnuTLS had a timing side-channel when handling\ncertain RSA-PSK key exchanges. A remote attacker could possibly use this\nissue to recover sensitive information.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gnutls28","version":"3.6.13-2ubuntu1.9","description":"GNU TLS library","is_source":true},{"name":"gnutls-bin","version":"3.6.13-2ubuntu1.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.9","pocket":"security"},{"name":"gnutls-doc","version":"3.6.13-2ubuntu1.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.9","pocket":"security"},{"name":"guile-gnutls","version":"3.6.13-2ubuntu1.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.9","pocket":"security"},{"name":"libgnutls-dane0","version":"3.6.13-2ubuntu1.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.9","pocket":"security"},{"name":"libgnutls-openssl27","version":"3.6.13-2ubuntu1.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.9","pocket":"security"},{"name":"libgnutls28-dev","version":"3.6.13-2ubuntu1.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.9","pocket":"security"},{"name":"libgnutls30","version":"3.6.13-2ubuntu1.9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.9","pocket":"security"},{"name":"libgnutlsxx28","version":"3.6.13-2ubuntu1.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.9","pocket":"security"}],"jammy":[{"name":"gnutls28","version":"3.7.3-4ubuntu1.3","description":"GNU TLS library","is_source":true},{"name":"gnutls-bin","version":"3.7.3-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.3-4ubuntu1.3","pocket":"security"},{"name":"gnutls-doc","version":"3.7.3-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.3-4ubuntu1.3","pocket":"security"},{"name":"guile-gnutls","version":"3.7.3-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.3-4ubuntu1.3","pocket":"security"},{"name":"libgnutls-dane0","version":"3.7.3-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.3-4ubuntu1.3","pocket":"security"},{"name":"libgnutls-openssl27","version":"3.7.3-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.3-4ubuntu1.3","pocket":"security"},{"name":"libgnutls28-dev","version":"3.7.3-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.3-4ubuntu1.3","pocket":"security"},{"name":"libgnutls30","version":"3.7.3-4ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.3-4ubuntu1.3","pocket":"security"},{"name":"libgnutlsxx28","version":"3.7.3-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.3-4ubuntu1.3","pocket":"security"}],"lunar":[{"name":"gnutls28","version":"3.7.8-5ubuntu1.1","description":"GNU TLS library","is_source":true},{"name":"gnutls-bin","version":"3.7.8-5ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.8-5ubuntu1.1","pocket":"security"},{"name":"gnutls-doc","version":"3.7.8-5ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.8-5ubuntu1.1","pocket":"security"},{"name":"guile-gnutls","version":"3.7.8-5ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.8-5ubuntu1.1","pocket":"security"},{"name":"libgnutls-dane0","version":"3.7.8-5ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.8-5ubuntu1.1","pocket":"security"},{"name":"libgnutls-openssl27","version":"3.7.8-5ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.8-5ubuntu1.1","pocket":"security"},{"name":"libgnutls28-dev","version":"3.7.8-5ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.8-5ubuntu1.1","pocket":"security"},{"name":"libgnutls30","version":"3.7.8-5ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.8-5ubuntu1.1","pocket":"security"},{"name":"libgnutlsxx30","version":"3.7.8-5ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.7.8-5ubuntu1.1","pocket":"security"}],"mantic":[{"name":"gnutls28","version":"3.8.1-4ubuntu1.1","description":"GNU TLS library","is_source":true},{"name":"gnutls-bin","version":"3.8.1-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.8.1-4ubuntu1.1","pocket":"security"},{"name":"gnutls-doc","version":"3.8.1-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.8.1-4ubuntu1.1","pocket":"security"},{"name":"libgnutls-dane0","version":"3.8.1-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.8.1-4ubuntu1.1","pocket":"security"},{"name":"libgnutls-openssl27","version":"3.8.1-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.8.1-4ubuntu1.1","pocket":"security"},{"name":"libgnutls28-dev","version":"3.8.1-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.8.1-4ubuntu1.1","pocket":"security"},{"name":"libgnutls30","version":"3.8.1-4ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":"https://launchpad.net/ubuntu/+source/gnutls28/3.8.1-4ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2023-5981"]},{"id":"USN-6499-2","title":"GnuTLS vulnerability","summary":"GnuTLS could be made to expose sensitive information over the network.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-01-08T11:39:13.521467","description":"USN-6499-1 fixed vulnerabilities in GnuTLS. This update provides the\ncorresponding update for Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that GnuTLS had a timing side-channel when handling\n certain RSA-PSK key exchanges. A remote attacker could possibly use this\n issue to recover sensitive information.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"gnutls28","version":"3.5.18-1ubuntu1.6+esm1","description":"GNU TLS library","is_source":true},{"name":"gnutls-bin","version":"3.5.18-1ubuntu1.6+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":null,"pocket":"esm-infra"},{"name":"gnutls-doc","version":"3.5.18-1ubuntu1.6+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":null,"pocket":"esm-infra"},{"name":"libgnutls-dane0","version":"3.5.18-1ubuntu1.6+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":null,"pocket":"esm-infra"},{"name":"libgnutls-openssl27","version":"3.5.18-1ubuntu1.6+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":null,"pocket":"esm-infra"},{"name":"libgnutls28-dev","version":"3.5.18-1ubuntu1.6+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":null,"pocket":"esm-infra"},{"name":"libgnutls30","version":"3.5.18-1ubuntu1.6+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":null,"pocket":"esm-infra"},{"name":"libgnutlsxx28","version":"3.5.18-1ubuntu1.6+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gnutls28","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-5981"]}]},{"id":"CVE-2023-44446","published":"2023-11-17T00:00:00","updated_at":"2026-04-24T13:52:15.307050+00:00","description":"\nGStreamer MXF File Parsing Use-After-Free Remote Code Execution\nVulnerability. This vulnerability allows remote attackers to execute\narbitrary code on affected installations of GStreamer. Interaction with\nthis library is required to exploit this vulnerability but attack vectors\nmay vary depending on the implementation.\nThe specific flaw exists within the parsing of MXF video files. The issue\nresults from the lack of validating the existence of an object prior to\nperforming operations on the object. An attacker can leverage this\nvulnerability to execute code in the context of the current process. Was\nZDI-CAN-22299.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://gstreamer.freedesktop.org/security/sa-2023-0010.html","https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5635","https://ubuntu.com/security/notices/USN-6526-1","https://www.cve.org/CVERecord?id=CVE-2023-44446","https://ubuntu.com/security/notices/USN-8205-1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056101"],"patches":{"gst-plugins-bad0.10":[],"gst-plugins-bad1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/274551d450e443a8c71baa95e3f8d5dad212737f","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7dfaa57b6f9b55f17ffe824bd8988bb71ae11353"]},"tags":{},"packages":[{"name":"gst-plugins-bad0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-bad0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-bad0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-bad0.10","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-bad1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-bad1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-bad1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-bad1.0","statuses":[{"release_codename":"upstream","status":"released","description":"1.22.7","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.14.5-0ubuntu1~18.04.1+esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"1.22.1-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"1.22.4-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.8.3-1ubuntu0.2+esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-6526-1","USN-8205-1"],"notices":[{"id":"USN-6526-1","title":"GStreamer Bad Plugins vulnerabilities","summary":"Several security issues were fixed in GStreamer Bad Plugins.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-11-29T17:48:53.720283","description":"It was discovered that GStreamer Bad Plugins incorrectly handled certain\nmedia files. A remote attacker could use this issue to cause GStreamer\nBad Plugins to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-bad1.0","version":"1.16.3-0ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-opencv","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad-doc","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-opencv1.0-0","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"}],"jammy":[{"name":"gst-plugins-bad1.0","version":"1.20.3-0ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-opencv","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad-apps","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-wpe","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-opencv1.0-0","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"}],"lunar":[{"name":"gst-plugins-bad1.0","version":"1.22.1-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-opencv","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad-apps","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-opencv1.0-0","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"}],"mantic":[{"name":"gst-plugins-bad1.0","version":"1.22.4-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-opencv","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad-apps","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-opencv1.0-0","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2023-40476","CVE-2023-44429","CVE-2023-40474","CVE-2023-44446","CVE-2023-40475","CVE-2023-37329"]},{"id":"USN-8205-1","title":"GStreamer Bad Plugins vulnerabilities","summary":"Several security issues were fixed in GStreamer Bad Plugins.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-04-23T12:16:49.081144","description":"It was discovered that multiple plugins in GStreamer contained arithmetic\noverflows. An attacker could possibly use this issue to cause applications\nusing the plugins to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2023-37329, CVE-2023-40474, CVE-2023-40475,\nCVE-2023-40476)\n\nIt was discovered that the MXF demuxer plugin in GStreamer did not\nproperly manage memory. An attacker could possibly use this issue to cause\napplications using the plugin to crash, resulting in a denial of service,\nor possibly execute arbitrary code. (CVE-2023-44446)\n\nIt was discovered that the H265 codec plugin in GStreamer could be made\nto write out of bounds. An attacker could possibly use this issue to\ncause applications using the plugin to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. (CVE-2025-3887)","is_hidden":false,"release_packages":{"bionic":[{"name":"gst-plugins-bad1.0","version":"1.14.5-0ubuntu1~18.04.1+esm1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.14.5-0ubuntu1~18.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"gstreamer1.0-opencv","version":"1.14.5-0ubuntu1~18.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"gstreamer1.0-plugins-bad","version":"1.14.5-0ubuntu1~18.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"gstreamer1.0-plugins-bad-doc","version":"1.14.5-0ubuntu1~18.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"libgstreamer-opencv1.0-0","version":"1.14.5-0ubuntu1~18.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.14.5-0ubuntu1~18.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.14.5-0ubuntu1~18.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"}],"xenial":[{"name":"gst-plugins-bad1.0","version":"1.8.3-1ubuntu0.2+esm1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.8.3-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"gstreamer1.0-hybris","version":"1.8.3-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"gstreamer1.0-plugins-bad","version":"1.8.3-1ubuntu0.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"gstreamer1.0-plugins-bad-doc","version":"1.8.3-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"gstreamer1.0-plugins-bad-faad","version":"1.8.3-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"gstreamer1.0-plugins-bad-videoparsers","version":"1.8.3-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.8.3-1ubuntu0.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.8.3-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2023-40475","CVE-2023-37329","CVE-2025-3887","CVE-2023-40474","CVE-2023-44446","CVE-2023-40476"]}]},{"id":"CVE-2023-44429","published":"2023-11-17T00:00:00","updated_at":"2025-08-04T18:51:16.310460+00:00","description":"\nGStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code\nExecution Vulnerability. This vulnerability allows remote attackers to\nexecute arbitrary code on affected installations of GStreamer. Interaction\nwith this library is required to exploit this vulnerability but attack\nvectors may vary depending on the implementation.\nThe specific flaw exists within the parsing of AV1 encoded video files. The\nissue results from the lack of proper validation of the length of\nuser-supplied data prior to copying it to a fixed-length heap-based buffer.\nAn attacker can leverage this vulnerability to execute code in the context\nof the current process. Was ZDI-CAN-22226.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://gstreamer.freedesktop.org/security/sa-2023-0009.html","https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5634","https://ubuntu.com/security/notices/USN-6526-1","https://www.cve.org/CVERecord?id=CVE-2023-44429"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056102"],"patches":{"gst-plugins-bad0.10":[],"gst-plugins-bad1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1db83d3f745332cbda6adf954b2c53a10caa205e","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/b76a801f57353b893c344025cac56413140fca6d"]},"tags":{},"packages":[{"name":"gst-plugins-bad0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-bad0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-bad0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-bad0.10","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-bad1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-bad1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-bad1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-bad1.0","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"1.22.1-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"1.22.4-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"1.22.4-1ubuntu2","component":null,"pocket":"security"}]}],"notices_ids":["USN-6526-1"],"notices":[{"id":"USN-6526-1","title":"GStreamer Bad Plugins vulnerabilities","summary":"Several security issues were fixed in GStreamer Bad Plugins.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-11-29T17:48:53.720283","description":"It was discovered that GStreamer Bad Plugins incorrectly handled certain\nmedia files. A remote attacker could use this issue to cause GStreamer\nBad Plugins to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-bad1.0","version":"1.16.3-0ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-opencv","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad-doc","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-opencv1.0-0","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.16.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.16.3-0ubuntu1.1","pocket":"security"}],"jammy":[{"name":"gst-plugins-bad1.0","version":"1.20.3-0ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-opencv","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad-apps","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-wpe","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-opencv1.0-0","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.20.3-0ubuntu1.1","pocket":"security"}],"lunar":[{"name":"gst-plugins-bad1.0","version":"1.22.1-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-opencv","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad-apps","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-opencv1.0-0","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.22.1-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.1-1ubuntu1.1","pocket":"security"}],"mantic":[{"name":"gst-plugins-bad1.0","version":"1.22.4-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-bad-1.0","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-opencv","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-bad-apps","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-opencv1.0-0","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-0","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-bad1.0-dev","version":"1.22.4-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.22.4-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2023-40476","CVE-2023-44429","CVE-2023-40474","CVE-2023-44446","CVE-2023-40475","CVE-2023-37329"]}]},{"id":"CVE-2023-48237","published":"2023-11-16T23:15:00","updated_at":"2025-08-26T00:16:22.696023+00:00","description":"\nVim is an open source command line text editor. In affected versions when\nshifting lines in operator pending mode and using a very large value, it\nmay be possible to overflow the size of integer. Impact is low, user\ninteraction is required and a crash may not even happen in all situations.\nThis issue has been addressed in commit `6bf131888` which has been included\nin version 9.0.2112. Users are advised to upgrade. There are no known\nworkarounds for this vulnerability.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nRequires user interaction"}],"codename":null,"priority":"low","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/vim/vim/security/advisories/GHSA-f2m2-v387-gv87","https://github.com/vim/vim/commit/6bf131888a3d1de62bbfa8a7ea03c0ddccfd496e (v9.0.2112)","https://github.com/vim/vim/commit/6bf131888a3d1de62bbfa8a7ea03c0ddccfd496e","http://www.openwall.com/lists/oss-security/2023/11/16/1","https://ubuntu.com/security/notices/USN-6557-1","https://www.cve.org/CVERecord?id=CVE-2023-48237"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm22","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.21","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.15","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm15","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-6557-1"],"notices":[{"id":"USN-6557-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-14T17:31:12.723162","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-48706","CVE-2023-48234","CVE-2023-48231","CVE-2023-46246","CVE-2023-48235","CVE-2022-1725","CVE-2023-48232","CVE-2022-2042","CVE-2022-2000","CVE-2022-1886","CVE-2023-48233","CVE-2023-48236","CVE-2022-1771","CVE-2022-1897","CVE-2023-48237"]}]},{"id":"CVE-2023-48236","published":"2023-11-16T23:15:00","updated_at":"2025-08-04T19:47:36.502775+00:00","description":"\nVim is an open source command line text editor. When using the z= command,\nthe user may overflow the count with values larger\nthan MAX_INT. Impact is low, user interaction is required and a crash may\nnot even happen in all situations. This vulnerability has been addressed in\ncommit `73b2d379` which has been included in release version 9.0.2111.\nUsers are advised to upgrade. There are no known workarounds for this\nvulnerability.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nRequires user interaction"}],"codename":null,"priority":"low","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/vim/vim/security/advisories/GHSA-pr4c-932v-8hx5","https://github.com/vim/vim/commit/73b2d3790cad5694fc0ed0db2926e4220c48d968 (v9.0.2111)","https://github.com/vim/vim/commit/73b2d3790cad5694fc0ed0db2926e4220c48d968","http://www.openwall.com/lists/oss-security/2023/11/16/1","https://ubuntu.com/security/notices/USN-6557-1","https://www.cve.org/CVERecord?id=CVE-2023-48236"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.21","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.15","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm15","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm22","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-6557-1"],"notices":[{"id":"USN-6557-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-14T17:31:12.723162","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-48706","CVE-2023-48234","CVE-2023-48231","CVE-2023-46246","CVE-2023-48235","CVE-2022-1725","CVE-2023-48232","CVE-2022-2042","CVE-2022-2000","CVE-2022-1886","CVE-2023-48233","CVE-2023-48236","CVE-2022-1771","CVE-2022-1897","CVE-2023-48237"]}]},{"id":"CVE-2023-48235","published":"2023-11-16T23:15:00","updated_at":"2025-08-04T19:47:36.502775+00:00","description":"\nVim is an open source command line text editor. When parsing relative ex\naddresses one may unintentionally cause an\noverflow. Ironically this happens in the existing overflow check, because\nthe line number becomes negative and LONG_MAX - lnum will cause the\noverflow. Impact is low, user interaction is required and a crash may not\neven happen in all situations. This issue has been addressed in commit\n`060623e` which has been included in release version 9.0.2110. Users are\nadvised to upgrade. There are no known workarounds for this vulnerability.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nRequires user interaction"}],"codename":null,"priority":"low","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/vim/vim/security/advisories/GHSA-6g74-hr6q-pr8g","https://github.com/vim/vim/commit/060623e4a3bc72b011e7cd92bedb3bfb64e06200 (v9.0.2110)","https://github.com/vim/vim/commit/060623e4a3bc72b011e7cd92bedb3bfb64e06200","http://www.openwall.com/lists/oss-security/2023/11/16/1","https://ubuntu.com/security/notices/USN-6557-1","https://www.cve.org/CVERecord?id=CVE-2023-48235"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.21","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.15","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm15","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm22","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-6557-1"],"notices":[{"id":"USN-6557-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-14T17:31:12.723162","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-48706","CVE-2023-48234","CVE-2023-48231","CVE-2023-46246","CVE-2023-48235","CVE-2022-1725","CVE-2023-48232","CVE-2022-2042","CVE-2022-2000","CVE-2022-1886","CVE-2023-48233","CVE-2023-48236","CVE-2022-1771","CVE-2022-1897","CVE-2023-48237"]}]},{"id":"CVE-2023-48234","published":"2023-11-16T23:15:00","updated_at":"2025-08-26T00:16:22.696023+00:00","description":"\nVim is an open source command line text editor. When getting the count for\na normal mode z command, it may overflow for large counts given. Impact is\nlow, user interaction is required and a crash may not even happen in all\nsituations. This issue has been addressed in commit `58f9befca1` which has\nbeen included in release version 9.0.2109. Users are advised to upgrade.\nThere are no known workarounds for this vulnerability.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nRequires user interaction"}],"codename":null,"priority":"low","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/vim/vim/security/advisories/GHSA-59gw-c949-6phq","https://github.com/vim/vim/commit/58f9befca1fa172068effad7f2ea5a9d6a7b0cca (v9.0.2109)","https://github.com/vim/vim/commit/58f9befca1fa172068effad7f2ea5a9d6a7b0cca","http://www.openwall.com/lists/oss-security/2023/11/16/1","https://ubuntu.com/security/notices/USN-6557-1","https://www.cve.org/CVERecord?id=CVE-2023-48234"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.21","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.15","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm15","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm22","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-6557-1"],"notices":[{"id":"USN-6557-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-14T17:31:12.723162","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-48706","CVE-2023-48234","CVE-2023-48231","CVE-2023-46246","CVE-2023-48235","CVE-2022-1725","CVE-2023-48232","CVE-2022-2042","CVE-2022-2000","CVE-2022-1886","CVE-2023-48233","CVE-2023-48236","CVE-2022-1771","CVE-2022-1897","CVE-2023-48237"]}]},{"id":"CVE-2023-48233","published":"2023-11-16T23:15:00","updated_at":"2025-08-26T00:16:22.696023+00:00","description":"\nVim is an open source command line text editor. If the count after the :s\ncommand is larger than what fits into a (signed) long variable, abort with\ne_value_too_large. Impact is low, user interaction is required and a crash\nmay not even happen in all situations. This issue has been addressed in\ncommit `ac6378773` which has been included in release version 9.0.2108.\nUsers are advised to upgrade. There are no known workarounds for this\nvulnerability.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nRequires user interaction"}],"codename":null,"priority":"low","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/vim/vim/security/advisories/GHSA-3xx4-hcq6-r2vj","https://github.com/vim/vim/commit/ac63787734fda2e294e477af52b3bd601517fa78 (v9.0.2108)","https://github.com/vim/vim/commit/ac63787734fda2e294e477af52b3bd601517fa78","http://www.openwall.com/lists/oss-security/2023/11/16/1","https://ubuntu.com/security/notices/USN-6557-1","https://www.cve.org/CVERecord?id=CVE-2023-48233"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.21","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.15","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm15","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm22","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-6557-1"],"notices":[{"id":"USN-6557-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-14T17:31:12.723162","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-48706","CVE-2023-48234","CVE-2023-48231","CVE-2023-46246","CVE-2023-48235","CVE-2022-1725","CVE-2023-48232","CVE-2022-2042","CVE-2022-2000","CVE-2022-1886","CVE-2023-48233","CVE-2023-48236","CVE-2022-1771","CVE-2022-1897","CVE-2023-48237"]}]},{"id":"CVE-2023-48232","published":"2023-11-16T23:15:00","updated_at":"2025-08-26T00:16:22.696023+00:00","description":"\nVim is an open source command line text editor. A floating point exception\nmay occur when calculating the line offset for overlong lines and smooth\nscrolling is enabled and the cpo-settings include the 'n' flag. This may\nhappen when a window border is present and when the wrapped line continues\non the next physical line directly in the window border because the 'cpo'\nsetting includes the 'n' flag. Only users with non-default settings are\naffected and the exception should only result in a crash. This issue has\nbeen addressed in commit `cb0b99f0` which has been included in release\nversion 9.0.2107. Users are advised to upgrade. There are no known\nworkarounds for this vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/vim/vim/security/advisories/GHSA-f6cx-x634-hqpw","https://github.com/vim/vim/commit/cb0b99f0672d8446585d26e998343dceca17d1ce (v9.0.2107)","https://github.com/vim/vim/commit/cb0b99f0672d8446585d26e998343dceca17d1ce","http://www.openwall.com/lists/oss-security/2023/11/16/1","https://ubuntu.com/security/notices/USN-6557-1","https://www.cve.org/CVERecord?id=CVE-2023-48232"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-6557-1"],"notices":[{"id":"USN-6557-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-14T17:31:12.723162","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-48706","CVE-2023-48234","CVE-2023-48231","CVE-2023-46246","CVE-2023-48235","CVE-2022-1725","CVE-2023-48232","CVE-2022-2042","CVE-2022-2000","CVE-2022-1886","CVE-2023-48233","CVE-2023-48236","CVE-2022-1771","CVE-2022-1897","CVE-2023-48237"]}]},{"id":"CVE-2023-48231","published":"2023-11-16T23:15:00","updated_at":"2025-08-26T00:16:22.696023+00:00","description":"\nVim is an open source command line text editor. When closing a window, vim\nmay try to access already freed window structure. Exploitation beyond\ncrashing the application has not been shown to be viable. This issue has\nbeen addressed in commit `25aabc2b` which has been included in release\nversion 9.0.2106. Users are advised to upgrade. There are no known\nworkarounds for this vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765","https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a (v9.0.2106)","https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a","http://www.openwall.com/lists/oss-security/2023/11/16/1","https://ubuntu.com/security/notices/USN-6557-1","https://www.cve.org/CVERecord?id=CVE-2023-48231"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.21","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.15","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm15","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm22","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-6557-1"],"notices":[{"id":"USN-6557-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-14T17:31:12.723162","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-48706","CVE-2023-48234","CVE-2023-48231","CVE-2023-46246","CVE-2023-48235","CVE-2022-1725","CVE-2023-48232","CVE-2022-2042","CVE-2022-2000","CVE-2022-1886","CVE-2023-48233","CVE-2023-48236","CVE-2022-1771","CVE-2022-1897","CVE-2023-48237"]}]}],"offset":32880,"limit":20,"total_results":79316}