Floating Point Exception in Vim: Vulnerability CVE-2023-48232
Summary
DEBIAN-CVE-2023-48232: Vim is an open source command line text editor. Affects vim versions < 2:9.0.2116-1. Fixed in 2:9.0.2116-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Vim is a widely used open-source command line text editor known for its efficiency and versatility in text manipulation. It supports various programming languages and offers features like syntax highlighting, multi-level undo, and extensive customization through plugins. However, Vim is susceptible to vulnerabilities that can affect its stability and security, such as the floating point exception identified in CVE-2023-48232.
Vulnerability Detail
CVE-2023-48232 is a vulnerability in Vim that can lead to a floating point exception when calculating the line offset for overlong lines, particularly when smooth scrolling is enabled and the 'cpo' settings include the 'n' flag. This issue arises when a window border is present, and the wrapped line continues on the next physical line directly in the window border. Users with non-default settings are primarily affected, and while the exception results in a crash, it does not pose a direct security threat. The vulnerability has been addressed in version 2:9.0.2116-1.
How To Fix
Minimum fixed version
2:9.0.2116-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade vimTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no known workarounds for this vulnerability. Users are advised to upgrade to the patched version to mitigate the risk.
Conclusion
Vim's vulnerability CVE-2023-48232 highlights the importance of keeping software updated to mitigate risks associated with specific configurations. Users are encouraged to upgrade to the patched version to ensure stability and avoid crashes.
See every vulnerability recorded for vim →
FAQ
CVE-2023-48232 is a vulnerability in Vim that can cause a floating point exception under specific conditions, leading to a crash.
Users of Vim with non-default settings that enable smooth scrolling and include the 'n' flag in the 'cpo' settings are affected.
The primary consequence is a crash of the Vim editor when the specific conditions are met, but it does not pose a direct security threat.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Using tools like Vulert, which monitors open-source vulnerabilities in real-time using a manifest file, can help you stay informed about potential issues.
References
Related vulnerabilities
Recent vulnerabilities recorded for vim.
