CVE-2020-20703 — Classic Buffer Overflow in VIM

CWE-120 — Classic Buffer OverflowCWE-787 — Out-of-bounds Write5 documents5 sources
Severity
9.8CRITICALNVD
EPSS
3.7%
top 12.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
VIMDebian VIM
Timeline
PublishedJun 20

Description

Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶debiandebian/vim< vim 2:8.1.2136-1 (bookworm)
▶Debianvim/vim< 2:8.1.2136-1+3
▶NVDvim/vim8.1.2135

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
OSV
CVE-2020-20703: Buffer Overflow vulnerability in VIM v↗2023-06-20
▶
GHSA
GHSA-hxgq-2x58-pgpq: Buffer Overflow vulnerability in VIM v↗2023-06-20
▶

📋Vendor Advisories

2
Red Hat
vim: buffer overflow↗2023-06-20
▶
Debian
CVE-2020-20703: vim - Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to exec...↗2020
▶