Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2022-1620

Published: 08/05/2022 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Vim

Vulnerability Summary

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim before 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows malicious users to cause a denial of service (application crash) via a crafted input.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

vim vim

fedoraproject fedora 34

fedoraproject fedora 35

fedoraproject fedora 36

apple macos

Vendor Advisories

Ubuntu Security Notice: USN-5460-1: Vim vulnerabilities
Several security issues were fixed in Vim ...
Ubuntu Security Notice: USN-5613-2: Vim regression
USN-5613-1 caused a regression in Vim ...
Ubuntu Security Notice: USN-5613-1: Vim vulnerabilities
Several security issues were fixed in Vim ...
Amazon Linux 2: ALAS2-2022-1829
Use after free in append_command in GitHub repository vim/vim prior to 824895 This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution (CVE-2022-1616) Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 824899 This vulnerabilities ...
Amazon Linux AMI: ALAS-2022-1628
Use after free in append_command in GitHub repository vim/vim prior to 824895 This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution (CVE-2022-1616) Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 824899 This vulnerabilities ...
Red Hat:
NULL Pointer Dereference in function vim_regexec_string at regexpc:2729 in GitHub repository vim/vim prior to 82 NULL Pointer Dereference in function vim_regexec_string at regexpc:2729 allows attackers to cause a denial of service (application crash) via a crafted input ...

References

CWE-476https://huntr.dev/bounties/7a4c59f3-fcc0-4496-995d-5ca6acd2da51https://github.com/vim/vim/commit/8e4b76da1d7e987d43ca960dfbc372d1c617466fhttps://security.gentoo.org/glsa/202208-32https://support.apple.com/kb/HT213488http://seclists.org/fulldisclosure/2022/Oct/41http://seclists.org/fulldisclosure/2022/Oct/28https://security.gentoo.org/glsa/202305-16https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUN33257RUM4RS2I4GZETKFSAXPETATG/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/https://nvd.nist.govhttps://ubuntu.com/security/notices/USN-5460-1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21987buffer overflowCVE-2024-28890CVE-2024-27574CVE-2024-27347CVE-2024-31450privilegeSSTICVE-2024-31666
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook