Published: 14/02/2022 Updated: 13/12/2022

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Heap-based Buffer Overflow in GitHub repository vim/vim before 8.2.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vim vim
fedoraproject fedora 34
fedoraproject fedora 35
debian debian linux 9.0
debian debian linux 10.0
apple macos

Heap-based Buffer Overflow in Conda vim prior to 82 ...

Several security issues were fixed in Vim ...

A flaw was found in vim that causes an out-of-range pointer offset vulnerability This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution (CVE-2022-0554) A heap-based buffer overflow flaw was found in vim's ex_retab() function of indentc file This flaw occurs when repeatedly using :retab This flaw al ...

A heap based out-of-bounds write flaw was found in vim's opsc This flaw allows an attacker to trick a user to open a crafted file triggering an out-of-bounds write This vulnerability is capable of crashing software, modify memory, and possible code execution (CVE-2022-0261) A flaw was found in vim The vulnerability occurs due to reading beyon ...

A flaw was found in vim The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution (CVE-2022-0393) A flaw was found in vim The vulnerability occurs due to stack corruption when looking for spe ...

CWE-787 https://huntr.dev/bounties/bf3e0643-03e9-4436-a1c8-74e7111c32bf https://github.com/vim/vim/commit/6e28703a8e41f775f64e442c5d11ce1ff599aa3f https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GOY5YWTP5QUY2EFLCL7AUWA2CV57C37/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html https://support.apple.com/kb/HT213488 http://seclists.org/fulldisclosure/2022/Oct/41 http://seclists.org/fulldisclosure/2022/Oct/28 https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2022-0572 https://ubuntu.com/security/notices/USN-5460-1

CVE-2022-0572

Vulnerability Summary

Most Upvoted Vulmon Research Post

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect