Published: 26/10/2022 Updated: 07/11/2023

CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6

VMScore: 0

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vim vim
fedoraproject fedora 35
fedoraproject fedora 36
debian debian linux 10.0
netapp active iq unified manager -

A vulnerability was found in vim and classified as problematic Affected by this issue is the function qf_update_buffer of the file quickfixc of the component autocmd Handler The manipulation leads to use after free The attack may be launched remotely Upgrading to version 900805 is able to address this issue The name of the patch is d0fab10e ...

DescriptionThe MITRE CVE dictionary describes this issue as: A vulnerability was found in vim and classified as problematic Affected by this issue is the function qf_update_buffer of the file quickfixc of the component autocmd Handler The manipulation leads to use after free The attack may be launched remotely Upgrading to version 900805 is ...

ALAS-2022-251 Amazon Linux 2022 Security Advisory: ALAS-2022-251 Advisory Release Date: 2022-12-06 16:45 Pacific ...

CWE-119 https://github.com/vim/vim/commit/d0fab10ed2a86698937e3c3fed2f10bd9bb5e731 https://vuldb.com/?id.212324 https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html https://security.netapp.com/advisory/ntap-20221223-0004/https://support.apple.com/kb/HT213605 http://seclists.org/fulldisclosure/2023/Jan/19 https://security.gentoo.org/glsa/202305-16 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JCW33NOLMELTTTDJH7WGDIFJZ5YEEMK/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYEK5RNMH7MVQH6RPBKLSCCA6NMIKHDV/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2022-1902.html

CVE-2022-3705

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect