Amazon Linux AMI 2: CVE-2023-1170: Security patch for vim (ALAS-2023-2005)

Amazon Linux AMI 2: CVE-2023-1170: Security patch for vim (ALAS-2023-2005)

Severity

6

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:C)

Published

03/03/2023

Created

05/05/2023

Added

04/06/2023

Modified

01/28/2025

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

Solution(s)

• amazon-linux-ami-2-upgrade-vim-common
• amazon-linux-ami-2-upgrade-vim-data
• amazon-linux-ami-2-upgrade-vim-debuginfo
• amazon-linux-ami-2-upgrade-vim-enhanced
• amazon-linux-ami-2-upgrade-vim-filesystem
• amazon-linux-ami-2-upgrade-vim-minimal
• amazon-linux-ami-2-upgrade-vim-x11

References

• https://attackerkb.com/topics/cve-2023-1170
• AL2/ALAS-2023-2005
• CVE - 2023-1170