{"cves":[{"id":"CVE-2023-39512","published":"2023-09-05T21:15:00","updated_at":"2025-08-26T18:47:28.108195+00:00","description":"\nCacti is an open source operational monitoring and fault management\nframework. Affected versions are subject to a Stored Cross-Site-Scripting\n(XSS) Vulnerability which allows an authenticated user to poison data\nstored in the _cacti_'s database. These data will be viewed by\nadministrative _cacti_ accounts and execute JavaScript code in the victim's\nbrowser at view-time. The script under `data_sources.php` displays the data\nsource management information (e.g. data source path, polling\nconfiguration, device name related to the datasource etc.) for different\ndata visualizations of the _cacti_ app. _CENSUS_ found that an adversary\nthat is able to configure a malicious device name, can deploy a stored XSS\nattack against any user of the same (or broader) privileges. A user that\npossesses the _General Administration>Sites/Devices/Data_ permissions can\nconfigure the device names in _cacti_. This configuration occurs through\n`http://<HOST>/cacti/host.php`, while the rendered malicious payload is\nexhibited at `http://<HOST>/cacti/data_sources.php`. This vulnerability has\nbeen addressed in version 1.2.25. Users are advised to upgrade. Users\nunable to update should manually filter HTML output.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/Cacti/cacti/security/advisories/GHSA-vqcc-5v63-g9q7","https://www.cve.org/CVERecord?id=CVE-2023-39512"],"bugs":[""],"patches":{"cacti":[]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.2.25+ds1-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-39510","published":"2023-09-05T21:15:00","updated_at":"2025-08-04T18:51:03.965381+00:00","description":"\nCacti is an open source operational monitoring and fault management\nframework. Affected versions are subject to a Stored Cross-Site-Scripting\n(XSS) Vulnerability allows an authenticated user to poison data stored in\nthe _cacti_'s database. These data will be viewed by administrative _cacti_\naccounts and execute JavaScript code in the victim's browser at view-time.\nThe`reports_admin.php` script displays reporting information about graphs,\ndevices, data sources etc.\nCENSUS found that an adversary that is able to configure a malicious Device\nname, can deploy a stored XSS attack against any user of the same (or\nbroader) privileges. A user that possesses the _General\nAdministration>Sites/Devices/Data_ permissions can configure the device\nnames in _cacti_. This configuration occurs through\n`http://<HOST>/cacti/host.php`, while the rendered malicious payload is\nexhibited at `http://<HOST>/cacti/reports_admin.php` when the a graph with\nthe maliciously altered device name is linked to the report. This\nvulnerability has been addressed in version 1.2.25. Users are advised to\nupgrade. Users unable to update should manually filter HTML output.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/Cacti/cacti/security/advisories/GHSA-24w4-4hp2-3j8h","https://www.cve.org/CVERecord?id=CVE-2023-39510"],"bugs":[""],"patches":{"cacti":[]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.2.25+ds1-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-39366","published":"2023-09-05T21:15:00","updated_at":"2025-08-04T18:51:03.965381+00:00","description":"\nCacti is an open source operational monitoring and fault management\nframework. Affected versions are subject to a Stored Cross-Site-Scripting\n(XSS) Vulnerability allows an authenticated user to poison data stored in\nthe _cacti_'s database. These data will be viewed by administrative _cacti_\naccounts and execute JavaScript code in the victim's browser at view-time.\nThe `data_sources.php` script displays the data source management\ninformation (e.g. data source path, polling configuration etc.) for\ndifferent data visualizations of the _cacti_ app.\nCENSUS found that an adversary that is able to configure a malicious Device\nname, can deploy a stored XSS attack against any user of the same (or\nbroader) privileges. A user that possesses the _General\nAdministration>Sites/Devices/Data_ permissions can configure the device\nnames in _cacti_. This configuration occurs through\n`http://<HOST>/cacti/host.php`, while the rendered malicious payload is\nexhibited at `http://<HOST>/cacti/data_sources.php`. This vulnerability has\nbeen addressed in version 1.2.25. Users are advised to upgrade. Users\nunable to update should manually filter HTML output.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/Cacti/cacti/security/advisories/GHSA-rwhh-xxm6-vcrv","https://www.cve.org/CVERecord?id=CVE-2023-39366"],"bugs":[""],"patches":{"cacti":[]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.2.25+ds1-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-39361","published":"2023-09-05T21:15:00","updated_at":"2025-06-24T15:12:20.430844+00:00","description":"\nCacti is an open source operational monitoring and fault management\nframework. Affected versions are subject to a SQL injection discovered in\ngraph_view.php. Since guest users can access graph_view.php without\nauthentication by default, if guest users are being utilized in an enabled\nstate, there could be the potential for significant damage. Attackers may\nexploit this vulnerability, and there may be possibilities for actions such\nas the usurpation of administrative privileges or remote code execution.\nThis issue has been addressed in version 1.2.25. Users are advised to\nupgrade. There are no known workarounds for this vulnerability.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nThe vulnerable page can be accessed without authentication by default and the vulnerability can be exploited remotely and lead to code execution."},{"author":"alexmurray","note":"This was introduced upstream via\nhttps://github.com/Cacti/cacti/commit/36269461cb9b03581ad5d7f6ddbc085a28fb9c37\nand so only 1.2.19 and later were affected."}],"codename":null,"priority":"high","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/Cacti/cacti/security/advisories/GHSA-6r43-q2fw-5wrg","https://ubuntu.com/security/notices/USN-6720-1","https://www.cve.org/CVERecord?id=CVE-2023-39361"],"bugs":[""],"patches":{"cacti":["upstream: https://github.com/cacti/cacti/commit/4246aee6310846d0e106bd05279e54fff3765822"]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"upstream","status":"released","description":"1.2.25+ds1-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"1.2.25+ds1-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.2.19+ds1-2ubuntu1+esm1","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"1.2.25+ds1-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.2.25+ds1-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"1.2.25+ds1-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"1.2.25+ds1-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"1.2.25+ds1-2","component":null,"pocket":"security"}]}],"notices_ids":["USN-6720-1"],"notices":[{"id":"USN-6720-1","title":"Cacti vulnerability","summary":"Cacti could be made to crash if it received specially crafted\ninput.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-04-02T11:41:26.727695","description":"\nKentaro Kawane discovered that Cacti incorrectly handled user provided \ninput sent through request parameters to the graph_view.php script. \nA remote authenticated attacker could use this issue to perform \nSQL injection attacks.\n","is_hidden":false,"release_packages":{"jammy":[{"name":"cacti","version":"1.2.19+ds1-2ubuntu1+esm1","description":"web interface for graphing of monitoring systems","is_source":true},{"name":"cacti","version":"1.2.19+ds1-2ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/cacti","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2023-39361"]}]},{"id":"CVE-2023-39360","published":"2023-09-05T21:15:00","updated_at":"2025-08-26T18:13:42.302482+00:00","description":"\nCacti is an open source operational monitoring and fault management\nframework.Affected versions are subject to a Stored Cross-Site-Scripting\n(XSS) Vulnerability allows an authenticated user to poison data. The\nvulnerability is found in `graphs_new.php`. Several validations are\nperformed, but the `returnto` parameter is directly passed to\n`form_save_button`. In order to bypass this validation, returnto must\ncontain `host.php`. This vulnerability has been addressed in version\n1.2.25. Users are advised to upgrade. Users unable to update should\nmanually filter HTML output.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/Cacti/cacti/security/advisories/GHSA-gx8c-xvjh-9qh4","https://www.cve.org/CVERecord?id=CVE-2023-39360"],"bugs":[""],"patches":{"cacti":[]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.2.25+ds1-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-39359","published":"2023-09-05T21:15:00","updated_at":"2025-08-26T18:08:55.492466+00:00","description":"\nCacti is an open source operational monitoring and fault management\nframework. An authenticated SQL injection vulnerability was discovered\nwhich allows authenticated users to perform privilege escalation and remote\ncode execution. The vulnerability resides in the `graphs.php` file. When\ndealing with the cases of ajax_hosts and ajax_hosts_noany, if the `site_id`\nparameter is greater than 0, it is directly reflected in the WHERE clause\nof the SQL statement. This creates an SQL injection vulnerability. This\nissue has been addressed in version 1.2.25. Users are advised to upgrade.\nThere are no known workarounds for this vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/Cacti/cacti/security/advisories/GHSA-q4wh-3f9w-836h","https://www.cve.org/CVERecord?id=CVE-2023-39359"],"bugs":[""],"patches":{"cacti":[]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.2.25+ds1-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.2.26+ds1-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-4781","published":"2023-09-05T19:15:00","updated_at":"2025-08-26T00:16:17.705744+00:00","description":"\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/c867eb0a-aa8b-4946-a621-510350673883/","https://github.com/vim/vim/commit/f6d28fe2c95c678cc3202cc5dc825a3fcc709e93 (v9.0.1873)","https://huntr.dev/bounties/c867eb0a-aa8b-4946-a621-510350673883","https://github.com/vim/vim/commit/f6d28fe2c95c678cc3202cc5dc825a3fcc709e93","https://ubuntu.com/security/notices/USN-6452-1","https://www.cve.org/CVERecord?id=CVE-2023-4781"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.20","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.13","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-6452-1"],"notices":[{"id":"USN-6452-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-10-25T16:47:19.738997","description":"It was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04. (CVE-2023-3896)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-4733, CVE-2023-4750)\n\nIt was discovered that Vim contained an arithmetic overflow. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10.\n(CVE-2023-4734)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. (CVE-2023-4735, CVE-2023-5344)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 23.04 and Ubuntu\n23.10. (CVE-2023-4738)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and\nUbuntu 23.04. (CVE-2023-4751)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4752, CVE-2023-5535)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4781)\n\nIt was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2023-5441)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.20","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.13","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.1","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm14","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm20","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-4752","CVE-2023-5535","CVE-2023-4733","CVE-2023-4750","CVE-2023-3896","CVE-2023-4781","CVE-2023-5344","CVE-2023-4751","CVE-2023-5441","CVE-2023-4735","CVE-2023-4738","CVE-2023-4734"]}]},{"id":"CVE-2023-4778","published":"2023-09-05T16:15:00","updated_at":"2025-08-26T19:05:23.336024+00:00","description":"\nOut-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/abb450fb-4ab2-49b0-90da-3d878eea5397/","https://github.com/gpac/gpac/commit/d553698050af478049e1a09e44a15ac884f223ed","https://huntr.dev/bounties/abb450fb-4ab2-49b0-90da-3d878eea5397","https://www.cve.org/CVERecord?id=CVE-2023-4778"],"bugs":[""],"patches":{"gpac":[]},"tags":{},"packages":[{"name":"gpac","source":"https://ubuntu.com/security/cve?package=gpac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gpac","debian":"https://tracker.debian.org/pkg/gpac","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-40743","published":"2023-09-05T15:15:00","updated_at":"2025-08-04T19:47:09.785280+00:00","description":"\n** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an\napplication, it may not have been obvious that looking up a service through\n\"ServiceFactory.getService\" allows potentially dangerous lookup mechanisms\nsuch as LDAP. When passing untrusted input to this API method, this could\nexpose the application to DoS, SSRF and even attacks leading to RCE.\nAs Axis 1 has been EOL we recommend you migrate to a different SOAP engine,\nsuch as Apache Axis 2/Java. As a workaround, you may review your code to\nverify no untrusted or unsanitized input is passed to\n\"ServiceFactory.getService\", or by applying the patch from\nhttps://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210\n. The Apache Axis project does not expect to create an Axis 1.x release\nfixing this problem, though contributors that would like to work towards\nthis are welcome.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.openwall.com/lists/oss-security/2023/09/05/1","https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210","https://lists.apache.org/thread/gs0qgk2mgss7zfhzdd6ftfjvm4kp7v82","https://ubuntu.com/security/notices/USN-6470-1","https://www.cve.org/CVERecord?id=CVE-2023-40743"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051288"],"patches":{"axis":[]},"tags":{},"packages":[{"name":"axis","source":"https://ubuntu.com/security/cve?package=axis","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=axis","debian":"https://tracker.debian.org/pkg/axis","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"1.4-28+deb10u1build0.23.10.1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.4-25ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"1.4-28+deb10u1build0.20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.4-28+deb10u1build0.22.04.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"1.4-28+deb10u1build0.23.04.1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.4-24ubuntu0.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-6470-1"],"notices":[{"id":"USN-6470-1","title":"Axis vulnerability","summary":"Axis could be made to crash or execute arbitrary code if it received specially\ncrafted input.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-11-02T09:23:47.061255","description":"It was discovered that Axis incorrectly handled certain inputs. If a user or\nan automated system were tricked into opening a specially crafted input file,\na remote attacker could possibly use this issue to cause a denial of service\nor execute arbitrary code. (CVE-2023-40743)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"axis","version":"1.4-25ubuntu0.1~esm1","description":"SOAP implementation in Java","is_source":true},{"name":"libaxis-java","version":"1.4-25ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":null,"pocket":"esm-apps"},{"name":"libaxis-java-doc","version":"1.4-25ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"axis","version":"1.4-28+deb10u1build0.20.04.1","description":"SOAP implementation in Java","is_source":true},{"name":"libaxis-java","version":"1.4-28+deb10u1build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":"https://launchpad.net/ubuntu/+source/axis/1.4-28+deb10u1build0.20.04.1","pocket":"security"},{"name":"libaxis-java-doc","version":"1.4-28+deb10u1build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":"https://launchpad.net/ubuntu/+source/axis/1.4-28+deb10u1build0.20.04.1","pocket":"security"}],"jammy":[{"name":"axis","version":"1.4-28+deb10u1build0.22.04.1","description":"SOAP implementation in Java","is_source":true},{"name":"libaxis-java","version":"1.4-28+deb10u1build0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":"https://launchpad.net/ubuntu/+source/axis/1.4-28+deb10u1build0.22.04.1","pocket":"security"},{"name":"libaxis-java-doc","version":"1.4-28+deb10u1build0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":"https://launchpad.net/ubuntu/+source/axis/1.4-28+deb10u1build0.22.04.1","pocket":"security"}],"lunar":[{"name":"axis","version":"1.4-28+deb10u1build0.23.04.1","description":"SOAP implementation in Java","is_source":true},{"name":"libaxis-java","version":"1.4-28+deb10u1build0.23.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":"https://launchpad.net/ubuntu/+source/axis/1.4-28+deb10u1build0.23.04.1","pocket":"security"},{"name":"libaxis-java-doc","version":"1.4-28+deb10u1build0.23.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":"https://launchpad.net/ubuntu/+source/axis/1.4-28+deb10u1build0.23.04.1","pocket":"security"}],"mantic":[{"name":"axis","version":"1.4-28+deb10u1build0.23.10.1","description":"SOAP implementation in Java","is_source":true},{"name":"libaxis-java","version":"1.4-28+deb10u1build0.23.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":"https://launchpad.net/ubuntu/+source/axis/1.4-28+deb10u1build0.23.10.1","pocket":"security"},{"name":"libaxis-java-doc","version":"1.4-28+deb10u1build0.23.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":"https://launchpad.net/ubuntu/+source/axis/1.4-28+deb10u1build0.23.10.1","pocket":"security"}],"xenial":[{"name":"axis","version":"1.4-24ubuntu0.1~esm1","description":"SOAP implementation in Java","is_source":true},{"name":"libaxis-java","version":"1.4-24ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":null,"pocket":"esm-apps"},{"name":"libaxis-java-doc","version":"1.4-24ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/axis","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2023-40743"]}]},{"id":"CVE-2023-20898","published":"2023-09-05T11:15:00","updated_at":"2026-04-01T12:11:38.301759+00:00","description":"\nGit Providers can read from the wrong environment because they get the same\ncache directory base name in Salt masters prior to 3005.2 or 3006.2.\nAnything that uses Git Providers with different environments can get\ngarbage data or the wrong data, which can lead to wrongful data disclosure,\nwrongful executions, data corruption and/or crash.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.2,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://saltproject.io/security-announcements/2023-08-10-advisory/","https://www.cve.org/CVERecord?id=CVE-2023-20898"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051504"],"patches":{"salt":["upstream: https://github.com/saltstack/salt/commit/6120bcac2ee79b6e8b104612941432841eb0c8c3"]},"tags":{},"packages":[{"name":"salt","source":"https://ubuntu.com/security/cve?package=salt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=salt","debian":"https://tracker.debian.org/pkg/salt","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3006.2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-20897","published":"2023-09-05T11:15:00","updated_at":"2025-08-26T19:04:01.633986+00:00","description":"\nSalt masters prior to 3005.2 or 3006.2 contain a DOS in minion return.\nAfter receiving several bad packets on the request server equal to the\nnumber of worker threads, the master will become unresponsive to return\nrequests until restarted.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://saltproject.io/security-announcements/2023-08-10-advisory/","https://www.cve.org/CVERecord?id=CVE-2023-20897"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051504"],"patches":{"salt":[]},"tags":{},"packages":[{"name":"salt","source":"https://ubuntu.com/security/cve?package=salt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=salt","debian":"https://tracker.debian.org/pkg/salt","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3006.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-4540","published":"2023-09-05T08:15:00","updated_at":"2025-08-04T18:53:36.320695+00:00","description":"\nImproper Handling of Exceptional Conditions vulnerability in Daurnimator\nlua-http library allows Excessive Allocation and a denial of service (DoS)\nattack to be executed by sending a properly crafted request to the server.\nSuch a request causes the program to enter an infinite loop.\nThis issue affects lua-http: all versions before commit ddab283.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680ca8d3cbde55e0bae6","https://cert.pl/posts/2023/09/CVE-2023-4540/","https://www.cve.org/CVERecord?id=CVE-2023-4540"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051511"],"patches":{"lua-http":[]},"tags":{},"packages":[{"name":"lua-http","source":"https://ubuntu.com/security/cve?package=lua-http","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lua-http","debian":"https://tracker.debian.org/pkg/lua-http","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-41910","published":"2023-09-05T07:15:00","updated_at":"2025-08-26T18:46:07.504100+00:00","description":"\nAn issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU\npacket with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely\nforce the lldpd daemon to perform an out-of-bounds read on heap memory.\nThis occurs in cdp_decode in daemon/protocols/cdp.c.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/lldpd/lldpd/releases/tag/1.0.17","https://www.cve.org/CVERecord?id=CVE-2023-41910"],"bugs":[""],"patches":{"lldpd":["upstream: https://github.com/lldpd/lldpd/commit/a9aeabdf879c25c584852a0bb5523837632f099b"]},"tags":{},"packages":[{"name":"lldpd","source":"https://ubuntu.com/security/cve?package=lldpd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lldpd","debian":"https://tracker.debian.org/pkg/lldpd","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.0.17-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.0.17-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.0.17-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.0.17-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.0.17-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.0.17-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.0.17-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-41909","published":"2023-09-05T07:15:00","updated_at":"2025-08-26T00:14:45.942829+00:00","description":"\nAn issue was discovered in FRRouting FRR through 9.0.\nbgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests\nwith no attributes, leading to a NULL pointer dereference.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"the quagga project was renamed to frr"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/FRRouting/frr/commit/cfd04dcb3e689754a72507d086ba3b9709fc5ed8 (frr-9.0)","https://github.com/FRRouting/frr/commit/cc1a551cb007cc8ed8b1ea0605a7ab46c16de12b (frr-8.5.1)","https://github.com/FRRouting/frr/commit/0a12b878082f77b67ad5d9b4782846ac738575a2 (frr-8.4.4)","https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8","https://ubuntu.com/security/notices/USN-6436-1","https://www.cve.org/CVERecord?id=CVE-2023-41909"],"bugs":[""],"patches":{"frr":[],"quagga":[]},"tags":{},"packages":[{"name":"frr","source":"https://ubuntu.com/security/cve?package=frr","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=frr","debian":"https://tracker.debian.org/pkg/frr","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.4.4-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8.4.4-1.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"7.2.1-1ubuntu0.2+esm1","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"8.1-1ubuntu1.6","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.4.2-1ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8.4.4-1.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8.4.4-1.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8.4.4-1.1ubuntu1","component":null,"pocket":"security"}]},{"name":"quagga","source":"https://ubuntu.com/security/cve?package=quagga","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=quagga","debian":"https://tracker.debian.org/pkg/quagga","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-6436-1"],"notices":[{"id":"USN-6436-1","title":"FRR vulnerabilities","summary":"Several security issues were fixed in FRR.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-10-18T04:43:51.253046","description":"It was discovered that the FRR did not properly check the attribute length\nin NRLI. A remote attacker could possibly use this issue to cause a denial\nof service. (CVE-2023-41358)\n\nIt was discovered that the FRR did not properly manage memory when reading\ninitial bytes of ORF header. A remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2023-41360)\n\nIt was discovered that FRR did not properly validate the attributes in the\nBGP FlowSpec functionality. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2023-41909)\n","is_hidden":false,"release_packages":{"focal":[{"name":"frr","version":"7.2.1-1ubuntu0.2+esm1","description":"FRRouting suite of internet protocols","is_source":true},{"name":"frr","version":"7.2.1-1ubuntu0.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":null,"pocket":"esm-apps"},{"name":"frr-doc","version":"7.2.1-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":null,"pocket":"esm-apps"},{"name":"frr-pythontools","version":"7.2.1-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":null,"pocket":"esm-apps"},{"name":"frr-rpki-rtrlib","version":"7.2.1-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":null,"pocket":"esm-apps"},{"name":"frr-snmp","version":"7.2.1-1ubuntu0.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"frr","version":"8.1-1ubuntu1.6","description":"FRRouting suite of internet protocols","is_source":true},{"name":"frr","version":"8.1-1ubuntu1.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.6","pocket":"security"},{"name":"frr-doc","version":"8.1-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.6","pocket":"security"},{"name":"frr-pythontools","version":"8.1-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.6","pocket":"security"},{"name":"frr-rpki-rtrlib","version":"8.1-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.6","pocket":"security"},{"name":"frr-snmp","version":"8.1-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.6","pocket":"security"}],"lunar":[{"name":"frr","version":"8.4.2-1ubuntu1.4","description":"FRRouting suite of internet protocols","is_source":true},{"name":"frr","version":"8.4.2-1ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.4.2-1ubuntu1.4","pocket":"security"},{"name":"frr-doc","version":"8.4.2-1ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.4.2-1ubuntu1.4","pocket":"security"},{"name":"frr-pythontools","version":"8.4.2-1ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.4.2-1ubuntu1.4","pocket":"security"},{"name":"frr-rpki-rtrlib","version":"8.4.2-1ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.4.2-1ubuntu1.4","pocket":"security"},{"name":"frr-snmp","version":"8.4.2-1ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/frr","version_link":"https://launchpad.net/ubuntu/+source/frr/8.4.2-1ubuntu1.4","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2023-41360","CVE-2023-41909","CVE-2023-41358"]}]},{"id":"CVE-2023-36308","published":"2023-09-05T04:15:00","updated_at":"2025-08-04T19:46:58.532109+00:00","description":"\ndisintegration Imaging 1.6.2 allows attackers to cause a panic (because of\nan integer index out of range during a Grayscale call) via a crafted TIFF\nfile to the scan function of scanner.go. NOTE: it is unclear whether there\nare common use cases in which this panic could have any security\nconsequence","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/disintegration/imaging/releases/tag/v1.6.2","https://github.com/disintegration/imaging/issues/165","https://www.cve.org/CVERecord?id=CVE-2023-36308"],"bugs":[""],"patches":{"golang-github-disintegration-imaging":[]},"tags":{},"packages":[{"name":"golang-github-disintegration-imaging","source":"https://ubuntu.com/security/cve?package=golang-github-disintegration-imaging","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-github-disintegration-imaging","debian":"https://tracker.debian.org/pkg/golang-github-disintegration-imaging","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"disputed","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"disputed","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"disputed","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"disputed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-4758","published":"2023-09-04T16:15:00","updated_at":"2025-08-26T18:54:18.291886+00:00","description":"\nBuffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/gpac/gpac/commit/193633b1648582444fc99776cd741d7ba0125e86","https://huntr.dev/bounties/2f496261-1090-45ac-bc89-cc93c82090d6","https://www.cve.org/CVERecord?id=CVE-2023-4758"],"bugs":[""],"patches":{"gpac":[]},"tags":{},"packages":[{"name":"gpac","source":"https://ubuntu.com/security/cve?package=gpac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gpac","debian":"https://tracker.debian.org/pkg/gpac","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-4755","published":"2023-09-04T14:15:00","updated_at":"2025-08-26T18:13:09.101512+00:00","description":"\nUse After Free in GitHub repository gpac/gpac prior to 2.3-DEV.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/gpac/gpac/commit/895ac12da168435eb8db3f96978ffa4c69d66c3a","https://huntr.dev/bounties/463474b7-a4e8-42b6-8b30-e648a77ee6b3","https://www.cve.org/CVERecord?id=CVE-2023-4755"],"bugs":[""],"patches":{"gpac":[]},"tags":{},"packages":[{"name":"gpac","source":"https://ubuntu.com/security/cve?package=gpac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gpac","debian":"https://tracker.debian.org/pkg/gpac","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-4752","published":"2023-09-04T14:15:00","updated_at":"2025-08-26T00:16:17.705744+00:00","description":"\nUse After Free in GitHub repository vim/vim prior to 9.0.1858.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/85f62dd7-ed84-4fa2-b265-8a369a318757/","https://github.com/vim/vim/commit/ee9166eb3b41846661a39b662dc7ebe8b5e15139 (v9.0.1858)","https://huntr.dev/bounties/85f62dd7-ed84-4fa2-b265-8a369a318757","https://github.com/vim/vim/commit/ee9166eb3b41846661a39b662dc7ebe8b5e15139","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/","https://ubuntu.com/security/notices/USN-6452-1","https://www.cve.org/CVERecord?id=CVE-2023-4752"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.20","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.13","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-6452-1"],"notices":[{"id":"USN-6452-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-10-25T16:47:19.738997","description":"It was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04. (CVE-2023-3896)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-4733, CVE-2023-4750)\n\nIt was discovered that Vim contained an arithmetic overflow. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10.\n(CVE-2023-4734)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. (CVE-2023-4735, CVE-2023-5344)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 23.04 and Ubuntu\n23.10. (CVE-2023-4738)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and\nUbuntu 23.04. (CVE-2023-4751)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4752, CVE-2023-5535)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4781)\n\nIt was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2023-5441)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.20","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.13","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.1","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm14","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm20","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-4752","CVE-2023-5535","CVE-2023-4733","CVE-2023-4750","CVE-2023-3896","CVE-2023-4781","CVE-2023-5344","CVE-2023-4751","CVE-2023-5441","CVE-2023-4735","CVE-2023-4738","CVE-2023-4734"]}]},{"id":"CVE-2023-4750","published":"2023-09-04T14:15:00","updated_at":"2025-08-26T00:16:13.368396+00:00","description":"\nUse After Free in GitHub repository vim/vim prior to 9.0.1857.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/1ab3ebdf-fe7d-4436-b483-9a586e03b0ea/","https://github.com/vim/vim/commit/fc68299d436cf87453e432daa77b6d545df4d7ed (v9.0.1857)","https://huntr.dev/bounties/1ab3ebdf-fe7d-4436-b483-9a586e03b0ea","https://github.com/vim/vim/commit/fc68299d436cf87453e432daa77b6d545df4d7ed","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/","https://ubuntu.com/security/notices/USN-6452-1","https://www.cve.org/CVERecord?id=CVE-2023-4750"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm6","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.20","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.13","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm14","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm20","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-6452-1"],"notices":[{"id":"USN-6452-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-10-25T16:47:19.738997","description":"It was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04. (CVE-2023-3896)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-4733, CVE-2023-4750)\n\nIt was discovered that Vim contained an arithmetic overflow. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10.\n(CVE-2023-4734)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. (CVE-2023-4735, CVE-2023-5344)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 23.04 and Ubuntu\n23.10. (CVE-2023-4738)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and\nUbuntu 23.04. (CVE-2023-4751)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4752, CVE-2023-5535)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4781)\n\nIt was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2023-5441)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.20","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.13","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.1","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm14","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm20","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-4752","CVE-2023-5535","CVE-2023-4733","CVE-2023-4750","CVE-2023-3896","CVE-2023-4781","CVE-2023-5344","CVE-2023-4751","CVE-2023-5441","CVE-2023-4735","CVE-2023-4738","CVE-2023-4734"]}]},{"id":"CVE-2023-4733","published":"2023-09-04T14:15:00","updated_at":"2025-08-26T00:16:13.368396+00:00","description":"\nUse After Free in GitHub repository vim/vim prior to 9.0.1840.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/1ce1fd8c-050a-4373-8004-b35b61590217/","https://github.com/vim/vim/commit/e1dc9a627536304bc4f738c21e909ad9fcf3974c (v9.0.1840)","https://huntr.dev/bounties/1ce1fd8c-050a-4373-8004-b35b61590217","https://github.com/vim/vim/commit/e1dc9a627536304bc4f738c21e909ad9fcf3974c","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/","https://ubuntu.com/security/notices/USN-6452-1","https://www.cve.org/CVERecord?id=CVE-2023-4733"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:9.0.1672-1ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm6","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.20","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.13","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:9.0.1000-4ubuntu3.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm14","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm20","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-6452-1"],"notices":[{"id":"USN-6452-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-10-25T16:47:19.738997","description":"It was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04. (CVE-2023-3896)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-4733, CVE-2023-4750)\n\nIt was discovered that Vim contained an arithmetic overflow. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10.\n(CVE-2023-4734)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. (CVE-2023-4735, CVE-2023-5344)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 23.04 and Ubuntu\n23.10. (CVE-2023-4738)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and\nUbuntu 23.04. (CVE-2023-4751)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4752, CVE-2023-5535)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-4781)\n\nIt was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2023-5441)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.20","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.20","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.13","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.13","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.2","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.1","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.1","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm14","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm20","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm20","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-4752","CVE-2023-5535","CVE-2023-4733","CVE-2023-4750","CVE-2023-3896","CVE-2023-4781","CVE-2023-5344","CVE-2023-4751","CVE-2023-5441","CVE-2023-4735","CVE-2023-4738","CVE-2023-4734"]}]}],"offset":33540,"limit":20,"total_results":79316}