CVE-2023-3896

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
OpenCloudOS	OpenCloudOS Stream	>= 9.0.1367-1, <= 9.0.1367-3
vim	vim	>= 9.0.1367-1, <= 9.0.1367-3

References

https://github.com/vim/vim/issues/12528Exploit, Issue Tracking, Patch, Vendor Advisory
https://github.com/vim/vim/pull/12540Patch, Vendor Advisory
https://security.netapp.com/advisory/ntap-20230831-0012/
https://github.com/vim/vim/issues/12528Exploit, Issue Tracking, Patch, Vendor Advisory
https://github.com/vim/vim/pull/12540Patch, Vendor Advisory
https://security.netapp.com/advisory/ntap-20230831-0012/

Timeline

Published: Aug 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-389607.3Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute CVE-2023-389619.8Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_CVE-2023-389646.1Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability.CVE-2023-389659.8Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI.CVE-2023-389695.4Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title p CVE-2023-38975.3Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate CVE-2023-389705.4Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload t CVE-2023-389715.4Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload t CVE-2023-389735.4A stored cross-site scripting (XSS) vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts CVE-2023-389745.4A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web s CVE-2023-389757.5* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_vectors.rs component.CVE-2023-389767.5An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.