Published: 20/06/2022 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Buffer Over-read in function grab_file_name in GitHub repository vim/vim before 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vim vim
debian debian linux 9.0
debian debian linux 10.0
fedoraproject fedora 35
fedoraproject fedora 36
apple macos

Debian Bug report logs - #1015984 vim: CVE-2022-1942 CVE-2022-1968 CVE-2022-2000 CVE-2022-2124 CVE-2022-2125 CVE-2022-2126 CVE-2022-2129 CVE-2022-2285 CVE-2022-2288 CVE-2022-2304 CVE-2022-2207 CVE-2022-1616 CVE-2022-1619 CVE-2022-1621 CVE-2022-1720 CVE-2022-1785 CVE-2022-1851 CVE-2022-1897 CVE-2022-1898 Package: src:vim; Maintainer for sr ...

Use after free in append_command in GitHub repository vim/vim prior to 824895 This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution (CVE-2022-1616) Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 824899 This vulnerabilities ...

A heap buffer over-read vulnerability was found in Vim's grab_file_name() function of the src/findfilec file This flaw occurs because the function reads after the NULL terminates the line with "gf" in Visual block mode This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer over-read vulnerabi ...

CWE-126 https://github.com/vim/vim/commit/395bd1f6d3edc9f7edb5d1f2d7deaf5a9e3ab93c https://huntr.dev/bounties/5ccfb386-7eb9-46e5-98e5-243ea4b358a8 https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html https://security.gentoo.org/glsa/202208-32 https://support.apple.com/kb/HT213488 https://support.apple.com/kb/HT213443 https://support.apple.com/kb/HT213444 http://seclists.org/fulldisclosure/2022/Oct/41 http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/43 http://seclists.org/fulldisclosure/2022/Oct/45 https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html https://security.gentoo.org/glsa/202305-16 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015984 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2022-1829.html

CVE-2022-1720

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect