CVE-2023-0512 - Vulnerability Details - OpenCVE

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

Vendors	Products
Vim	Vim

Configuration 1 [-]

cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://seclists.org/fulldisclosure/2023/Mar/17
http://seclists.org/fulldisclosure/2023/Mar/18
http://seclists.org/fulldisclosure/2023/Mar/21
https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835
https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/
https://nvd.nist.gov/vuln/detail/CVE-2023-0512
https://support.apple.com/kb/HT213670
https://support.apple.com/kb/HT213675
https://support.apple.com/kb/HT213677
https://www.cve.org/CVERecord?id=CVE-2023-0512

History

Mon, 31 Mar 2025 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: @huntrdev

Published: 2023-01-26T00:00:00.000Z

Updated: 2025-03-31T16:44:58.673Z

Reserved: 2023-01-26T00:00:00.000Z

Link: CVE-2023-0512

Vulnrichment

Updated: 2024-08-02T05:17:49.385Z

NVD

Status : Modified

Published: 2023-01-30T16:15:09.507

Modified: 2024-11-21T07:37:19.170

Link: CVE-2023-0512

Redhat

Severity : Low

Publid Date: 2023-01-30T00:00:00Z

Links: CVE-2023-0512 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-0512", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "assignerShortName": "@huntrdev", "dateUpdated": "2025-03-31T16:44:58.673Z", "dateReserved": "2023-01-26T00:00:00.000Z", "datePublished": "2023-01-26T00:00:00.000Z"}, "containers": {"cna": {"title": "Divide By Zero in vim/vim", "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntrdev", "dateUpdated": "2023-04-02T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "Divide By Zero in GitHub repository vim/vim prior to 9.0.1247."}], "affected": [{"vendor": "vim", "product": "vim/vim", "versions": [{"version": "unspecified", "lessThan": "9.0.1247", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74"}, {"url": "https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835"}, {"url": "https://support.apple.com/kb/HT213677"}, {"url": "https://support.apple.com/kb/HT213675"}, {"url": "https://support.apple.com/kb/HT213670"}, {"name": "20230327 APPLE-SA-2023-03-27-3 macOS Ventura 13.3", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2023/Mar/17"}, {"name": "20230327 APPLE-SA-2023-03-27-4 macOS Monterey 12.6.4", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2023/Mar/18"}, {"name": "20230327 APPLE-SA-2023-03-27-5 macOS Big Sur 11.7.5", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2023/Mar/21"}, {"name": "FEDORA-2023-030318ca00", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/"}], "metrics": [{"cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-369 Divide By Zero", "cweId": "CWE-369"}]}], "source": {"advisory": "de83736a-1936-4872-830b-f1e9b0ad2a74", "discovery": "EXTERNAL"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:17:49.385Z"}, "title": "CVE Program Container", "references": [{"url": "https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74", "tags": ["x_transferred"]}, {"url": "https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213677", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213675", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213670", "tags": ["x_transferred"]}, {"name": "20230327 APPLE-SA-2023-03-27-3 macOS Ventura 13.3", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2023/Mar/17"}, {"name": "20230327 APPLE-SA-2023-03-27-4 macOS Monterey 12.6.4", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2023/Mar/18"}, {"name": "20230327 APPLE-SA-2023-03-27-5 macOS Big Sur 11.7.5", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2023/Mar/21"}, {"name": "FEDORA-2023-030318ca00", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-31T16:44:49.926506Z", "id": "CVE-2023-0512", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-31T16:44:58.673Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74", "tags": ["x_transferred"]}, {"url": "https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213677", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213675", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213670", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2023/Mar/17", "name": "20230327 APPLE-SA-2023-03-27-3 macOS Ventura 13.3", "tags": ["mailing-list", "x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2023/Mar/18", "name": "20230327 APPLE-SA-2023-03-27-4 macOS Monterey 12.6.4", "tags": ["mailing-list", "x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2023/Mar/21", "name": "20230327 APPLE-SA-2023-03-27-5 macOS Big Sur 11.7.5", "tags": ["mailing-list", "x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/", "name": "FEDORA-2023-030318ca00", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:17:49.385Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-0512", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-31T16:44:49.926506Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-31T16:44:55.114Z"}}], "cna": {"title": "Divide By Zero in vim/vim", "source": {"advisory": "de83736a-1936-4872-830b-f1e9b0ad2a74", "discovery": "EXTERNAL"}, "metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "vim", "product": "vim/vim", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "9.0.1247", "versionType": "custom"}]}], "references": [{"url": "https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74"}, {"url": "https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835"}, {"url": "https://support.apple.com/kb/HT213677"}, {"url": "https://support.apple.com/kb/HT213675"}, {"url": "https://support.apple.com/kb/HT213670"}, {"url": "http://seclists.org/fulldisclosure/2023/Mar/17", "name": "20230327 APPLE-SA-2023-03-27-3 macOS Ventura 13.3", "tags": ["mailing-list"]}, {"url": "http://seclists.org/fulldisclosure/2023/Mar/18", "name": "20230327 APPLE-SA-2023-03-27-4 macOS Monterey 12.6.4", "tags": ["mailing-list"]}, {"url": "http://seclists.org/fulldisclosure/2023/Mar/21", "name": "20230327 APPLE-SA-2023-03-27-5 macOS Big Sur 11.7.5", "tags": ["mailing-list"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/", "name": "FEDORA-2023-030318ca00", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "Divide By Zero in GitHub repository vim/vim prior to 9.0.1247."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-369", "description": "CWE-369 Divide By Zero"}]}], "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntrdev", "dateUpdated": "2023-04-02T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2023-0512", "state": "PUBLISHED", "dateUpdated": "2025-03-31T16:44:58.673Z", "dateReserved": "2023-01-26T00:00:00.000Z", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "datePublished": "2023-01-26T00:00:00.000Z", "assignerShortName": "@huntrdev"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*", "matchCriteriaId": "46D215DD-1FC8-4130-9A95-38A4580B408F", "versionEndExcluding": "9.0.1247", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Divide By Zero in GitHub repository vim/vim prior to 9.0.1247."}, {"lang": "es", "value": "Divide By Zero en el repositorio de GitHub vim/vim anterior a 9.0.1247."}], "id": "CVE-2023-0512", "lastModified": "2024-11-21T07:37:19.170", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.3, "impactScore": 5.9, "source": "security@huntr.dev", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-01-30T16:15:09.507", "references": [{"source": "security@huntr.dev", "url": "http://seclists.org/fulldisclosure/2023/Mar/17"}, {"source": "security@huntr.dev", "url": "http://seclists.org/fulldisclosure/2023/Mar/18"}, {"source": "security@huntr.dev", "url": "http://seclists.org/fulldisclosure/2023/Mar/21"}, {"source": "security@huntr.dev", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835"}, {"source": "security@huntr.dev", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74"}, {"source": "security@huntr.dev", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/"}, {"source": "security@huntr.dev", "url": "https://support.apple.com/kb/HT213670"}, {"source": "security@huntr.dev", "url": "https://support.apple.com/kb/HT213675"}, {"source": "security@huntr.dev", "url": "https://support.apple.com/kb/HT213677"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2023/Mar/17"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2023/Mar/18"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2023/Mar/21"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT213670"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT213675"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT213677"}], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-369"}], "source": "security@huntr.dev", "type": "Secondary"}]}

{"bugzilla": {"description": "vim: divide by zero in adjust_skipcol() at move.ca", "id": "2165798", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2165798"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.8", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-369", "details": ["Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.", "A divide-by-zero flaw was found in Vim's adjust_skipcol() function in the move.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a floating point exception error and causing an application to crash, eventually leading to a denial of service."], "name": "CVE-2023-0512", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "vim", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "vim", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "vim", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "vim", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2023-01-30T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-0512\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-0512\nhttps://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74"], "statement": "Red Hat Product Security has rated this issue as having a Low security impact, because the \"victim\" has to run an untrusted file IN SCRIPT MODE. Someone who is running untrusted files in script mode is equivalent to someone just taking a random python script and running it.\nSince Red Hat Enterprise Linux 6, 7 are Out-of-Support-Scope for Low/Moderate flaws, the issue is not currently planned to be addressed in future updates for RHEL-6,7. Only Important and Critical severity flaws will be addressed at this time.\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle & Updates Policy: https://access.redhat.com/support/policy/updates/errata/.", "threat_severity": "Low"}