Skip to content

overflow in shift_line

Low
chrisbra published GHSA-f2m2-v387-gv87 Nov 16, 2023

Package

Vim (Vim)

Affected versions

<v9.0.2112

Patched versions

v9.0.2112

Description

overflow in shift_line

Date: 16.11.2023
Severity: Low

When shifting lines in operator pending mode and using a very large
value, we may overflow the size of integer. Fix this by using a long long
variable, testing if the result would be larger than INT_MAX and if so,
indent by INT_MAX value.

Impact is low, user interaction is required and a crash may not even happen.

The Vim project would like to thank Fabian Toepfer for reporting this issue
which is now fixed in Vim patch 9.0.2112.

Severity

Low
2.8
/ 10

CVSS base metrics

Attack vector
Local
Attack complexity
Low
Privileges required
Low
User interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CVE ID

CVE-2023-48237

Weaknesses

No CWEs