Vulnerability-Lookup

SUSE-SU-2022:3229-1

Vulnerability from csaf_suse - Published: 2022-09-09 12:46 - Updated: 2022-09-09 12:46

Summary

Security update for vim

Severity

Important

Notes

Title of the patch: Security update for vim

Description of the patch: This update for vim fixes the following issues: Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through get_lisp_indent() (bsc#1200902). - CVE-2022-2182: Fixed heap-based buffer overflow through parse_cmd_address() (bsc#1200903). - CVE-2022-2175: Fixed buffer over-read through cmdline_insert_reg() (bsc#1200904). - CVE-2022-2304: Fixed stack buffer overflow in spell_dump_compl() (bsc#1201249). - CVE-2022-2343: Fixed heap-based buffer overflow in GitHub repository vim prior to 9.0.0044 (bsc#1201356). - CVE-2022-2344: Fixed another heap-based buffer overflow vim prior to 9.0.0045 (bsc#1201359). - CVE-2022-2345: Fixed use after free in GitHub repository vim prior to 9.0.0046. (bsc#1201363). - CVE-2022-2819: Fixed heap-based Buffer Overflow in compile_lock_unlock() (bsc#1202414). - CVE-2022-2874: Fixed NULL Pointer Dereference in generate_loadvar() (bsc#1202552). - CVE-2022-1968: Fixed use after free in utf_ptr2char (bsc#1200270). - CVE-2022-2124: Fixed out of bounds read in current_quote() (bsc#1200697). - CVE-2022-2125: Fixed out of bounds read in get_lisp_indent() (bsc#1200698). - CVE-2022-2126: Fixed out of bounds read in suggest_trie_walk() (bsc#1200700). - CVE-2022-2129: Fixed out of bounds write in vim_regsub_both() (bsc#1200701). - CVE-2022-1720: Fixed out of bounds read in grab_file_name() (bsc#1200732). - CVE-2022-2264: Fixed out of bounds read in inc() (bsc#1201132). - CVE-2022-2284: Fixed out of bounds read in utfc_ptr2len() (bsc#1201133). - CVE-2022-2285: Fixed negative size passed to memmove() due to integer overflow (bsc#1201134). - CVE-2022-2286: Fixed out of bounds read in ins_bytes() (bsc#1201135). - CVE-2022-2287: Fixed out of bounds read in suggest_trie_walk() (bsc#1201136). - CVE-2022-2231: Fixed null pointer dereference skipwhite() (bsc#1201150). - CVE-2022-2210: Fixed out of bounds read in ml_append_int() (bsc#1201151). - CVE-2022-2208: Fixed null pointer dereference in diff_check() (bsc#1201152). - CVE-2022-2207: Fixed out of bounds read in ins_bs() (bsc#1201153). - CVE-2022-2257: Fixed out of bounds read in msg_outtrans_special() (bsc#1201154). - CVE-2022-2206: Fixed out of bounds read in msg_outtrans_attr() (bsc#1201155). - CVE-2022-2522: Fixed out of bounds read via nested autocommand (bsc#1201863). - CVE-2022-2571: Fixed heap-based buffer overflow related to ins_comp_get_next_word_or_line() (bsc#1202046). - CVE-2022-2580: Fixed heap-based buffer overflow related to eval_string() (bsc#1202049). - CVE-2022-2581: Fixed out-of-bounds read related to cstrchr() (bsc#1202050). - CVE-2022-2598: Fixed undefined behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput() (bsc#1202051). - CVE-2022-2817: Fixed use after gree in f_assert_fails() (bsc#1202420). - CVE-2022-2816: Fixed out-of-bounds Read in check_vim9_unlet() (bsc#1202421). - CVE-2022-2862: Fixed use-after-free in compile_nested_function() (bsc#1202511). - CVE-2022-2849: Fixed invalid memory access related to mb_ptr2len() (bsc#1202512). - CVE-2022-2845: Fixed buffer Over-read related to display_dollar() (bsc#1202515). - CVE-2022-2889: Fixed use-after-free in find_var_also_in_script() in evalvars.c (bsc#1202599). - CVE-2022-2923: Fixed NULL pointer dereference in GitHub repository vim/vim prior to 9.0.0240 (bsc#1202687). - CVE-2022-2946: Fixed use after free in function vim_vsnprintf_typval (bsc#1202689). - CVE-2022-3016: Fixed use after free in vim prior to 9.0.0285 (bsc#1202862). Bugfixes: - Fixing vim error on startup (bsc#1200884). - Fixing vim SUSE Linux Enterprise Server 15 SP4 Basesystem plugin-tlib issue (bsc#1201620).

Patchnames: SUSE-2022-3229,SUSE-SLE-Module-Basesystem-15-SP3-2022-3229,SUSE-SLE-Module-Basesystem-15-SP4-2022-3229,SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3229,SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3229,SUSE-SLE-Product-HPC-15-2022-3229,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3229,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3229,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3229,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3229,SUSE-SLE-Product-SLES-15-2022-3229,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3229,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3229,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3229,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3229,SUSE-SLE-Product-SLES_SAP-15-2022-3229,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3229,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3229,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3229,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3229,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3229,SUSE-SUSE-MicroOS-5.1-2022-3229,SUSE-SUSE-MicroOS-5.2-2022-3229,SUSE-Storage-6-2022-3229,SUSE-Storage-7-2022-3229,openSUSE-Leap-Micro-5.2-2022-3229,openSUSE-SLE-15.3-2022-3229,openSUSE-SLE-15.4-2022-3229

CVE-2022-1720

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products

Product	Version	Remediation
Unresolved product id: SUSE Enterprise Storage 6:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 6:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 6:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 6:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 6:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 6:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:vim-small-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:vim-small-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:vim-small-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:vim-small-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:vim-small-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:vim-small-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-small-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-small-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-small-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP3:vim-small-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-small-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-small-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-small-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP4:vim-small-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP3:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP3:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP3:gvim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP3:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP4:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP4:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP4:gvim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP4:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-BCL:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-BCL:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-BCL:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-BCL:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:gvim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:vim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-BCL:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-BCL:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-BCL:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-BCL:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:gvim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:vim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:gvim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:vim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 4.1:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 4.1:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 4.1:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Manager Proxy 4.1:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Manager Retail Branch Server 4.1:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Retail Branch Server 4.1:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Retail Branch Server 4.1:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Manager Retail Branch Server 4.1:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:gvim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:vim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:gvim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-small-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-small-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-small-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.3:vim-small-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:gvim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:gvim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:gvim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:gvim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-data-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-small-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-small-9.0.0313-150000.5.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-small-9.0.0313-150000.5.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.4:vim-small-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap Micro 5.2:vim-data-common-9.0.0313-150000.5.25.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap Micro 5.2:vim-small-9.0.0313-150000.5.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap Micro 5.2:vim-small-9.0.0313-150000.5.25.1.x86_64	—	Vendor Fix

Threats

Impact low

CVE-2022-1968

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2124

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2125

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2126

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2129

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2175

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2182

3.9 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2183

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2206

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2207

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2208

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2210

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2231

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2257

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2264

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2284

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2285

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2286

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2287

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2304

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2343

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2344

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2345

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2522

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2571

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2580

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2581

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2598

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2816

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2817

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2819

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2845

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2849

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2862

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2874

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2889

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-2923

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

CVE-2022-2946

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact moderate

CVE-2022-3016

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 187 products, the same list as for CVE-2022-1720

Threats

Impact low

References

169 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1200270	self
https://bugzilla.suse.com/1200697	self
https://bugzilla.suse.com/1200698	self
https://bugzilla.suse.com/1200700	self
https://bugzilla.suse.com/1200701	self
https://bugzilla.suse.com/1200732	self
https://bugzilla.suse.com/1200884	self
https://bugzilla.suse.com/1200902	self
https://bugzilla.suse.com/1200903	self
https://bugzilla.suse.com/1200904	self
https://bugzilla.suse.com/1201132	self
https://bugzilla.suse.com/1201133	self
https://bugzilla.suse.com/1201134	self
https://bugzilla.suse.com/1201135	self
https://bugzilla.suse.com/1201136	self
https://bugzilla.suse.com/1201150	self
https://bugzilla.suse.com/1201151	self
https://bugzilla.suse.com/1201152	self
https://bugzilla.suse.com/1201153	self
https://bugzilla.suse.com/1201154	self
https://bugzilla.suse.com/1201155	self
https://bugzilla.suse.com/1201249	self
https://bugzilla.suse.com/1201356	self
https://bugzilla.suse.com/1201359	self
https://bugzilla.suse.com/1201363	self
https://bugzilla.suse.com/1201620	self
https://bugzilla.suse.com/1201863	self
https://bugzilla.suse.com/1202046	self
https://bugzilla.suse.com/1202049	self
https://bugzilla.suse.com/1202050	self
https://bugzilla.suse.com/1202051	self
https://bugzilla.suse.com/1202414	self
https://bugzilla.suse.com/1202420	self
https://bugzilla.suse.com/1202421	self
https://bugzilla.suse.com/1202511	self
https://bugzilla.suse.com/1202512	self
https://bugzilla.suse.com/1202515	self
https://bugzilla.suse.com/1202552	self
https://bugzilla.suse.com/1202599	self
https://bugzilla.suse.com/1202687	self
https://bugzilla.suse.com/1202689	self
https://bugzilla.suse.com/1202862	self
https://www.suse.com/security/cve/CVE-2022-1720/	self
https://www.suse.com/security/cve/CVE-2022-1968/	self
https://www.suse.com/security/cve/CVE-2022-2124/	self
https://www.suse.com/security/cve/CVE-2022-2125/	self
https://www.suse.com/security/cve/CVE-2022-2126/	self
https://www.suse.com/security/cve/CVE-2022-2129/	self
https://www.suse.com/security/cve/CVE-2022-2175/	self
https://www.suse.com/security/cve/CVE-2022-2182/	self
https://www.suse.com/security/cve/CVE-2022-2183/	self
https://www.suse.com/security/cve/CVE-2022-2206/	self
https://www.suse.com/security/cve/CVE-2022-2207/	self
https://www.suse.com/security/cve/CVE-2022-2208/	self
https://www.suse.com/security/cve/CVE-2022-2210/	self
https://www.suse.com/security/cve/CVE-2022-2231/	self
https://www.suse.com/security/cve/CVE-2022-2257/	self
https://www.suse.com/security/cve/CVE-2022-2264/	self
https://www.suse.com/security/cve/CVE-2022-2284/	self
https://www.suse.com/security/cve/CVE-2022-2285/	self
https://www.suse.com/security/cve/CVE-2022-2286/	self
https://www.suse.com/security/cve/CVE-2022-2287/	self
https://www.suse.com/security/cve/CVE-2022-2304/	self
https://www.suse.com/security/cve/CVE-2022-2343/	self
https://www.suse.com/security/cve/CVE-2022-2344/	self
https://www.suse.com/security/cve/CVE-2022-2345/	self
https://www.suse.com/security/cve/CVE-2022-2522/	self
https://www.suse.com/security/cve/CVE-2022-2571/	self
https://www.suse.com/security/cve/CVE-2022-2580/	self
https://www.suse.com/security/cve/CVE-2022-2581/	self
https://www.suse.com/security/cve/CVE-2022-2598/	self
https://www.suse.com/security/cve/CVE-2022-2816/	self
https://www.suse.com/security/cve/CVE-2022-2817/	self
https://www.suse.com/security/cve/CVE-2022-2819/	self
https://www.suse.com/security/cve/CVE-2022-2845/	self
https://www.suse.com/security/cve/CVE-2022-2849/	self
https://www.suse.com/security/cve/CVE-2022-2862/	self
https://www.suse.com/security/cve/CVE-2022-2874/	self
https://www.suse.com/security/cve/CVE-2022-2889/	self
https://www.suse.com/security/cve/CVE-2022-2923/	self
https://www.suse.com/security/cve/CVE-2022-2946/	self
https://www.suse.com/security/cve/CVE-2022-3016/	self
https://www.suse.com/security/cve/CVE-2022-1720	external
https://bugzilla.suse.com/1200732	external
https://www.suse.com/security/cve/CVE-2022-1968	external
https://bugzilla.suse.com/1200270	external
https://www.suse.com/security/cve/CVE-2022-2124	external
https://bugzilla.suse.com/1200697	external
https://www.suse.com/security/cve/CVE-2022-2125	external
https://bugzilla.suse.com/1200698	external
https://bugzilla.suse.com/1205395	external
https://www.suse.com/security/cve/CVE-2022-2126	external
https://bugzilla.suse.com/1200700	external
https://www.suse.com/security/cve/CVE-2022-2129	external
https://bugzilla.suse.com/1200701	external
https://www.suse.com/security/cve/CVE-2022-2175	external
https://bugzilla.suse.com/1200904	external
https://www.suse.com/security/cve/CVE-2022-2182	external
https://bugzilla.suse.com/1200903	external
https://www.suse.com/security/cve/CVE-2022-2183	external
https://bugzilla.suse.com/1200902	external
https://www.suse.com/security/cve/CVE-2022-2206	external
https://bugzilla.suse.com/1201155	external
https://www.suse.com/security/cve/CVE-2022-2207	external
https://bugzilla.suse.com/1201153	external
https://www.suse.com/security/cve/CVE-2022-2208	external
https://bugzilla.suse.com/1201152	external
https://www.suse.com/security/cve/CVE-2022-2210	external
https://bugzilla.suse.com/1201151	external
https://www.suse.com/security/cve/CVE-2022-2231	external
https://bugzilla.suse.com/1201150	external
https://www.suse.com/security/cve/CVE-2022-2257	external
https://bugzilla.suse.com/1201154	external
https://www.suse.com/security/cve/CVE-2022-2264	external
https://bugzilla.suse.com/1201132	external
https://www.suse.com/security/cve/CVE-2022-2284	external
https://bugzilla.suse.com/1201133	external
https://www.suse.com/security/cve/CVE-2022-2285	external
https://bugzilla.suse.com/1201134	external
https://www.suse.com/security/cve/CVE-2022-2286	external
https://bugzilla.suse.com/1201135	external
https://www.suse.com/security/cve/CVE-2022-2287	external
https://bugzilla.suse.com/1201136	external
https://www.suse.com/security/cve/CVE-2022-2304	external
https://bugzilla.suse.com/1201249	external
https://www.suse.com/security/cve/CVE-2022-2343	external
https://bugzilla.suse.com/1201356	external
https://www.suse.com/security/cve/CVE-2022-2344	external
https://bugzilla.suse.com/1201359	external
https://www.suse.com/security/cve/CVE-2022-2345	external
https://bugzilla.suse.com/1201363	external
https://www.suse.com/security/cve/CVE-2022-2522	external
https://bugzilla.suse.com/1201863	external
https://www.suse.com/security/cve/CVE-2022-2571	external
https://bugzilla.suse.com/1202046	external
https://www.suse.com/security/cve/CVE-2022-2580	external
https://bugzilla.suse.com/1202049	external
https://www.suse.com/security/cve/CVE-2022-2581	external
https://bugzilla.suse.com/1202050	external
https://www.suse.com/security/cve/CVE-2022-2598	external
https://bugzilla.suse.com/1202051	external
https://www.suse.com/security/cve/CVE-2022-2816	external
https://bugzilla.suse.com/1202421	external
https://bugzilla.suse.com/1203576	external
https://www.suse.com/security/cve/CVE-2022-2817	external
https://bugzilla.suse.com/1202420	external
https://www.suse.com/security/cve/CVE-2022-2819	external
https://bugzilla.suse.com/1202414	external
https://bugzilla.suse.com/1203576	external
https://www.suse.com/security/cve/CVE-2022-2845	external
https://bugzilla.suse.com/1202515	external
https://www.suse.com/security/cve/CVE-2022-2849	external
https://bugzilla.suse.com/1202512	external
https://www.suse.com/security/cve/CVE-2022-2862	external
https://bugzilla.suse.com/1202511	external
https://www.suse.com/security/cve/CVE-2022-2874	external
https://bugzilla.suse.com/1202552	external
https://www.suse.com/security/cve/CVE-2022-2889	external
https://bugzilla.suse.com/1202599	external
https://www.suse.com/security/cve/CVE-2022-2923	external
https://bugzilla.suse.com/1202687	external
https://www.suse.com/security/cve/CVE-2022-2946	external
https://bugzilla.suse.com/1202689	external
https://www.suse.com/security/cve/CVE-2022-3016	external
https://bugzilla.suse.com/1202862	external

JSON

To clipboard

Loading 2.2 MB of JSON…

CVE-2022-1720 (GCVE-0-2022-1720)

Vulnerability from cvelistv5 – Published: 2022-05-16 00:00 – Updated: 2024-08-03 00:10

Title

Buffer Over-read in function grab_file_name in vim/vim

Summary

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Severity

6.6 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

CWE

CWE-126 - Buffer Over-read

Assigner

@huntrdev

References

15 references

URL	Tags
https://huntr.dev/bounties/5ccfb386-7eb9-46e5-98e…
https://github.com/vim/vim/commit/395bd1f6d3edc9f…
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://support.apple.com/kb/HT213443
https://support.apple.com/kb/HT213444
https://support.apple.com/kb/HT213488
http://seclists.org/fulldisclosure/2022/Oct/41	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/28	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/43	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/45	mailing-list
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2.4956 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:10:03.797Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/5ccfb386-7eb9-46e5-98e5-243ea4b358a8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/395bd1f6d3edc9f7edb5d1f2d7deaf5a9e3ab93c"
          },
          {
            "name": "[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213443"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213444"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213488"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/43"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/45"
          },
          {
            "name": "[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2.4956",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-126",
              "description": "CWE-126 Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/5ccfb386-7eb9-46e5-98e5-243ea4b358a8"
        },
        {
          "url": "https://github.com/vim/vim/commit/395bd1f6d3edc9f7edb5d1f2d7deaf5a9e3ab93c"
        },
        {
          "name": "[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "url": "https://support.apple.com/kb/HT213443"
        },
        {
          "url": "https://support.apple.com/kb/HT213444"
        },
        {
          "url": "https://support.apple.com/kb/HT213488"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/43"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/45"
        },
        {
          "name": "[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "5ccfb386-7eb9-46e5-98e5-243ea4b358a8",
        "discovery": "EXTERNAL"
      },
      "title": "Buffer Over-read in function grab_file_name in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-1720",
    "datePublished": "2022-05-16T00:00:00.000Z",
    "dateReserved": "2022-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:10:03.797Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1968 (GCVE-0-2022-1968)

Vulnerability from cvelistv5 – Published: 2022-06-02 00:00 – Updated: 2024-08-03 00:24

Title

Use After Free in vim/vim

Summary

Use After Free in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use After Free

Assigner

@huntrdev

References

9 references

URL	Tags
https://huntr.dev/bounties/949090e5-f4ea-4edf-bd7…
https://github.com/vim/vim/commit/409510c588b1eec…
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://support.apple.com/kb/HT213488
http://seclists.org/fulldisclosure/2022/Oct/41	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/28	mailing-list
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:24:43.777Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/949090e5-f4ea-4edf-bd79-cd98f0498a5b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/409510c588b1eec1ae33511ae97a21eb8e110895"
          },
          {
            "name": "[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213488"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
          },
          {
            "name": "[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use After Free in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/949090e5-f4ea-4edf-bd79-cd98f0498a5b"
        },
        {
          "url": "https://github.com/vim/vim/commit/409510c588b1eec1ae33511ae97a21eb8e110895"
        },
        {
          "name": "[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "url": "https://support.apple.com/kb/HT213488"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
        },
        {
          "name": "[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "949090e5-f4ea-4edf-bd79-cd98f0498a5b",
        "discovery": "EXTERNAL"
      },
      "title": "Use After Free in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-1968",
    "datePublished": "2022-06-02T00:00:00.000Z",
    "dateReserved": "2022-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:24:43.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2124 (GCVE-0-2022-2124)

Vulnerability from cvelistv5 – Published: 2022-06-19 00:00 – Updated: 2024-08-03 00:24

Title

Buffer Over-read in vim/vim

Summary

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-126 - Buffer Over-read

Assigner

@huntrdev

References

14 references

URL	Tags
https://huntr.dev/bounties/8e9e056d-f733-4540-98b…
https://github.com/vim/vim/commit/2f074f4685897ab…
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://support.apple.com/kb/HT213443
https://support.apple.com/kb/HT213444
https://support.apple.com/kb/HT213488
http://seclists.org/fulldisclosure/2022/Oct/41	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/28	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/43	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/45	mailing-list
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:24:44.258Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f"
          },
          {
            "name": "[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213443"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213444"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213488"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/43"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/45"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer Over-read in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-126",
              "description": "CWE-126 Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42"
        },
        {
          "url": "https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f"
        },
        {
          "name": "[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "url": "https://support.apple.com/kb/HT213443"
        },
        {
          "url": "https://support.apple.com/kb/HT213444"
        },
        {
          "url": "https://support.apple.com/kb/HT213488"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/43"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/45"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "8e9e056d-f733-4540-98b6-414bf36e0b42",
        "discovery": "EXTERNAL"
      },
      "title": "Buffer Over-read in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-2124",
    "datePublished": "2022-06-19T00:00:00.000Z",
    "dateReserved": "2022-06-18T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:24:44.258Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2125 (GCVE-0-2022-2125)

Vulnerability from cvelistv5 – Published: 2022-06-19 00:00 – Updated: 2024-08-03 00:24

Title

Heap-based Buffer Overflow in vim/vim

Summary

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

@huntrdev

References

13 references

URL	Tags
https://huntr.dev/bounties/17dab24d-beec-464d-9a7…
https://github.com/vim/vim/commit/0e8e938d497260d…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://support.apple.com/kb/HT213443
https://support.apple.com/kb/HT213444
https://support.apple.com/kb/HT213488
http://seclists.org/fulldisclosure/2022/Oct/41	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/28	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/43	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/45	mailing-list
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:24:44.280Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213443"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213444"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213488"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/43"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/45"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705"
        },
        {
          "url": "https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "url": "https://support.apple.com/kb/HT213443"
        },
        {
          "url": "https://support.apple.com/kb/HT213444"
        },
        {
          "url": "https://support.apple.com/kb/HT213488"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/43"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/45"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "17dab24d-beec-464d-9a72-5b6b11283705",
        "discovery": "EXTERNAL"
      },
      "title": "Heap-based Buffer Overflow in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-2125",
    "datePublished": "2022-06-19T00:00:00.000Z",
    "dateReserved": "2022-06-18T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:24:44.280Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2126 (GCVE-0-2022-2126)

Vulnerability from cvelistv5 – Published: 2022-06-19 00:00 – Updated: 2024-08-03 00:24

Title

Out-of-bounds Read in vim/vim

Summary

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-125 - Out-of-bounds Read

Assigner

@huntrdev

References

14 references

URL	Tags
https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f7…
https://github.com/vim/vim/commit/156d3911952d73b…
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://support.apple.com/kb/HT213443
https://support.apple.com/kb/HT213444
https://support.apple.com/kb/HT213488
http://seclists.org/fulldisclosure/2022/Oct/41	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/28	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/43	mailing-list
http://seclists.org/fulldisclosure/2022/Oct/45	mailing-list
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:24:44.233Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8"
          },
          {
            "name": "[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213443"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213444"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213488"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/43"
          },
          {
            "name": "20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/Oct/45"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds Read in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e"
        },
        {
          "url": "https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8"
        },
        {
          "name": "[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "url": "https://support.apple.com/kb/HT213443"
        },
        {
          "url": "https://support.apple.com/kb/HT213444"
        },
        {
          "url": "https://support.apple.com/kb/HT213488"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/41"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/28"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/43"
        },
        {
          "name": "20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/Oct/45"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "8d196d9b-3d10-41d2-9f70-8ef0d08c946e",
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-bounds Read in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-2126",
    "datePublished": "2022-06-19T00:00:00.000Z",
    "dateReserved": "2022-06-18T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:24:44.233Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2129 (GCVE-0-2022-2129)

Vulnerability from cvelistv5 – Published: 2022-06-19 00:00 – Updated: 2025-11-03 20:34

Title

Out-of-bounds Write in vim/vim

Summary

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

@huntrdev

References

8 references

URL	Tags
https://huntr.dev/bounties/3aaf06e7-9ae1-454d-b8c…
https://github.com/vim/vim/commit/d6211a52ab9f53b…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.gentoo.org/glsa/202305-16	vendor-advisory
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:34:44.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/3aaf06e7-9ae1-454d-b8ca-8709c98e5352"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/d6211a52ab9f53b82f884561ed43d2fe4d24ff7d"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "name": "[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds Write in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/3aaf06e7-9ae1-454d-b8ca-8709c98e5352"
        },
        {
          "url": "https://github.com/vim/vim/commit/d6211a52ab9f53b82f884561ed43d2fe4d24ff7d"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "name": "[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "3aaf06e7-9ae1-454d-b8ca-8709c98e5352",
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-bounds Write in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-2129",
    "datePublished": "2022-06-19T00:00:00.000Z",
    "dateReserved": "2022-06-18T00:00:00.000Z",
    "dateUpdated": "2025-11-03T20:34:44.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-2175 (GCVE-0-2022-2175)

Vulnerability from cvelistv5 – Published: 2022-06-23 00:00 – Updated: 2024-08-03 00:32

Title

Buffer Over-read in vim/vim

Summary

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-126 - Buffer Over-read

Assigner

@huntrdev

References

6 references

URL	Tags
https://huntr.dev/bounties/7f0481c2-8b57-4324-b47…
https://github.com/vim/vim/commit/6046aded8da002b…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:32:09.074Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer Over-read in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-126",
              "description": "CWE-126 Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55"
        },
        {
          "url": "https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "7f0481c2-8b57-4324-b47c-795d1ea67e55",
        "discovery": "EXTERNAL"
      },
      "title": "Buffer Over-read in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-2175",
    "datePublished": "2022-06-23T00:00:00.000Z",
    "dateReserved": "2022-06-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:32:09.074Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2182 (GCVE-0-2022-2182)

Vulnerability from cvelistv5 – Published: 2022-06-23 00:00 – Updated: 2024-08-03 00:32

Title

Heap-based Buffer Overflow in vim/vim

Summary

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

@huntrdev

References

6 references

URL	Tags
https://huntr.dev/bounties/238d8650-3beb-4831-a8f…
https://github.com/vim/vim/commit/f7c7c3fad6d2135…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:32:08.598Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8"
        },
        {
          "url": "https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "238d8650-3beb-4831-a8f7-6f0b597a6fb8",
        "discovery": "EXTERNAL"
      },
      "title": "Heap-based Buffer Overflow in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-2182",
    "datePublished": "2022-06-23T00:00:00.000Z",
    "dateReserved": "2022-06-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:32:08.598Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2183 (GCVE-0-2022-2183)

Vulnerability from cvelistv5 – Published: 2022-06-23 00:00 – Updated: 2024-08-03 00:32

Title

Out-of-bounds Read in vim/vim

Summary

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-125 - Out-of-bounds Read

Assigner

@huntrdev

References

6 references

URL	Tags
https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61…
https://github.com/vim/vim/commit/8eba2bd291b347e…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:32:08.693Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds Read in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975"
        },
        {
          "url": "https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "d74ca3f9-380d-4c0a-b61c-11113cc98975",
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-bounds Read in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-2183",
    "datePublished": "2022-06-23T00:00:00.000Z",
    "dateReserved": "2022-06-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:32:08.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2206 (GCVE-0-2022-2206)

Vulnerability from cvelistv5 – Published: 2022-06-26 00:00 – Updated: 2024-08-03 00:32

Title

Out-of-bounds Read in vim/vim

Summary

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-125 - Out-of-bounds Read

Assigner

@huntrdev

References

6 references

URL	Tags
https://huntr.dev/bounties/01d01e74-55d0-4d9e-878…
https://github.com/vim/vim/commit/e178af5a586ea02…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://security.gentoo.org/glsa/202305-16	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:32:08.643Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/01d01e74-55d0-4d9e-878e-79ba599be668"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/e178af5a586ea023622d460779fdcabbbfac0908"
          },
          {
            "name": "FEDORA-2022-719f3ec21b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
          },
          {
            "name": "FEDORA-2022-bb7f3cacbf",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "name": "GLSA-202305-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds Read in GitHub repository vim/vim prior to 8.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/01d01e74-55d0-4d9e-878e-79ba599be668"
        },
        {
          "url": "https://github.com/vim/vim/commit/e178af5a586ea023622d460779fdcabbbfac0908"
        },
        {
          "name": "FEDORA-2022-719f3ec21b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/"
        },
        {
          "name": "FEDORA-2022-bb7f3cacbf",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "name": "GLSA-202305-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-16"
        }
      ],
      "source": {
        "advisory": "01d01e74-55d0-4d9e-878e-79ba599be668",
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-bounds Read in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-2206",
    "datePublished": "2022-06-26T00:00:00.000Z",
    "dateReserved": "2022-06-25T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:32:08.643Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2022:3229-1

CVE-2022-1720 (GCVE-0-2022-1720)

CVE-2022-1968 (GCVE-0-2022-1968)

CVE-2022-2124 (GCVE-0-2022-2124)

CVE-2022-2125 (GCVE-0-2022-2125)

CVE-2022-2126 (GCVE-0-2022-2126)

CVE-2022-2129 (GCVE-0-2022-2129)

CVE-2022-2175 (GCVE-0-2022-2175)

CVE-2022-2182 (GCVE-0-2022-2182)

CVE-2022-2183 (GCVE-0-2022-2183)

CVE-2022-2206 (GCVE-0-2022-2206)

Tags

Sightings

Nomenclature

Related by attack behaviour