Vulnerability-Lookup

SUSE-SU-2022:4619-1

Vulnerability from csaf_suse - Published: 2022-12-27 04:16 - Updated: 2026-09-20 14:50

Summary

Security update for vim

Severity

Moderate

Notes

Title of the patch: Security update for vim

Description of the patch: This update for vim fixes the following issues: Updated to version 9.0.0814: * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483. * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490. * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598. * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer() * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag() * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse() * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321 * Fixing bsc#1200884 Vim: Error on startup * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32 * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37 * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37 * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl() * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044 * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045 * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046. * Fixing bsc#1201620 vim: SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock() * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar() * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote() * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent() * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk() * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both() * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name() * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc() * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len() * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes() * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk() * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite() * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int() * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check() * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs() * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special() * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr() * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line() * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string() * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr() * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput() * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails() * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet() * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function() * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len() * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar() * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240 * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00 * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to Heap-based Buffer Overflow * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to Heap-based Buffer Overflow * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use After Free * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open() in src/ex_docmd.c * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to Heap-based Buffer Overflow * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to Out-of-bounds Read * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to Out-of-bounds Read * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow in vim prior to 8.2. * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to Heap-based Buffer Overflow * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in vim prior to 8.2. * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in init_ccline() in ex_getln.c * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in Conda vim prior to 8.2. * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow in skip_range * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in append_command * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in function cmdline_erase_chars * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in function vim_regexec_string * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in find_pattern_in_path * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior to 8.2 * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior to 8.2 * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a .swp file to the editor's primary group, which allows local users to obtain sensitive information * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to Out-of-bounds Read * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow in vim prior to 8.2 * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in vim prior to 8.2 * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in cindent.c * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior to 8.2. * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read * Fixing bsc#1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in vim prior to 8.2. * Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in normal.c * Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in win_redr_status() drawscreen.c * Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to Heap-based Buffer Overflow * Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow * Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to Heap-based Buffer Overflow * Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow * Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c * Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read * Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which causes a denial of service. * Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim prior to 8.2. * Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7() * Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim prior to 8.2. * Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c

Patchnames: SUSE-2022-4619,SUSE-OpenStack-Cloud-9-2022-4619,SUSE-OpenStack-Cloud-Crowbar-9-2022-4619,SUSE-SLE-SAP-12-SP4-2022-4619,SUSE-SLE-SERVER-12-SP2-BCL-2022-4619,SUSE-SLE-SERVER-12-SP3-BCL-2022-4619,SUSE-SLE-SERVER-12-SP4-LTSS-2022-4619,SUSE-SLE-SERVER-12-SP5-2022-4619

CVE-2009-0316

Affected products

Recommended 90 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:gvim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:gvim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:gvim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:vim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:vim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:vim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP4:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gvim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gvim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gvim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:vim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:vim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:vim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:gvim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:gvim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:gvim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:vim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:vim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:vim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:gvim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:gvim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:gvim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:vim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:vim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:vim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP4:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gvim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gvim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gvim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:vim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:vim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:vim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:gvim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:vim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-0:9.0.0814-17.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-0:9.0.0814-17.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-0:9.0.0814-17.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 9:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 9:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 9:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 9:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 9:gvim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 9:vim-0:9.0.0814-17.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 9:vim-data-0:9.0.0814-17.9.1.noarch	—	Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 9:vim-data-common-0:9.0.0814-17.9.1.noarch	—	Vendor Fix

Threats

Impact moderate

CVE-2016-1248

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2017-17087

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2017-5953

8.4 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2017-6349

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2017-6350

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-3778

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-3796

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-3872

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2021-3875

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2021-3903

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-3927

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-3928

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-3968

8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2021-3973

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2021-3974

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2021-3984

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-4019

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-4069

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-4136

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2021-4166

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-4192

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2021-4193

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2021-46059

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-0128

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-0213

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-0261

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-0318

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-0319

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-0351

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-0359

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-0361

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-0392

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-0407

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2022-0413

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2022-0696

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1381

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1420

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1616

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1619

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1620

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1720

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-1733

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-1735

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1771

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-1785

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1796

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1851

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-1897

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1898

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1927

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-1968

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2124

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2125

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2126

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2129

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2175

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2182

3.9 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2183

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2206

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2207

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2208

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2210

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2231

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2257

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2264

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2284

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2285

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2286

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2287

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2304

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2343

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2344

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2345

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2522

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2571

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2580

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2581

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2598

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2816

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2817

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2819

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2845

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2849

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2862

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2874

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2889

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2923

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2946

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-2980

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-2982

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3016

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-3037

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact low

CVE-2022-3099

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3134

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3153

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3234

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2022-3235

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3278

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3296

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3297

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3324

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact important

CVE-2022-3352

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

CVE-2022-3705

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 90 products, the same list as for CVE-2009-0316

Threats

Impact moderate

References

455 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1070955	self
https://bugzilla.suse.com/1173256	self
https://bugzilla.suse.com/1174564	self
https://bugzilla.suse.com/1176549	self
https://bugzilla.suse.com/1182324	self
https://bugzilla.suse.com/1190533	self
https://bugzilla.suse.com/1190570	self
https://bugzilla.suse.com/1191770	self
https://bugzilla.suse.com/1191893	self
https://bugzilla.suse.com/1192167	self
https://bugzilla.suse.com/1192478	self
https://bugzilla.suse.com/1192481	self
https://bugzilla.suse.com/1192902	self
https://bugzilla.suse.com/1192903	self
https://bugzilla.suse.com/1192904	self
https://bugzilla.suse.com/1193294	self
https://bugzilla.suse.com/1193298	self
https://bugzilla.suse.com/1193466	self
https://bugzilla.suse.com/1193905	self
https://bugzilla.suse.com/1194093	self
https://bugzilla.suse.com/1194216	self
https://bugzilla.suse.com/1194217	self
https://bugzilla.suse.com/1194388	self
https://bugzilla.suse.com/1194556	self
https://bugzilla.suse.com/1194872	self
https://bugzilla.suse.com/1194885	self
https://bugzilla.suse.com/1195004	self
https://bugzilla.suse.com/1195066	self
https://bugzilla.suse.com/1195126	self
https://bugzilla.suse.com/1195202	self
https://bugzilla.suse.com/1195203	self
https://bugzilla.suse.com/1195332	self
https://bugzilla.suse.com/1195354	self
https://bugzilla.suse.com/1195356	self
https://bugzilla.suse.com/1196361	self
https://bugzilla.suse.com/1198596	self
https://bugzilla.suse.com/1198748	self
https://bugzilla.suse.com/1199331	self
https://bugzilla.suse.com/1199333	self
https://bugzilla.suse.com/1199334	self
https://bugzilla.suse.com/1199651	self
https://bugzilla.suse.com/1199655	self
https://bugzilla.suse.com/1199693	self
https://bugzilla.suse.com/1199745	self
https://bugzilla.suse.com/1199747	self
https://bugzilla.suse.com/1199936	self
https://bugzilla.suse.com/1200010	self
https://bugzilla.suse.com/1200011	self
https://bugzilla.suse.com/1200012	self
https://bugzilla.suse.com/1200270	self
https://bugzilla.suse.com/1200697	self
https://bugzilla.suse.com/1200698	self
https://bugzilla.suse.com/1200700	self
https://bugzilla.suse.com/1200701	self
https://bugzilla.suse.com/1200732	self
https://bugzilla.suse.com/1200884	self
https://bugzilla.suse.com/1200902	self
https://bugzilla.suse.com/1200903	self
https://bugzilla.suse.com/1200904	self
https://bugzilla.suse.com/1201132	self
https://bugzilla.suse.com/1201133	self
https://bugzilla.suse.com/1201134	self
https://bugzilla.suse.com/1201135	self
https://bugzilla.suse.com/1201136	self
https://bugzilla.suse.com/1201150	self
https://bugzilla.suse.com/1201151	self
https://bugzilla.suse.com/1201152	self
https://bugzilla.suse.com/1201153	self
https://bugzilla.suse.com/1201154	self
https://bugzilla.suse.com/1201155	self
https://bugzilla.suse.com/1201249	self
https://bugzilla.suse.com/1201356	self
https://bugzilla.suse.com/1201359	self
https://bugzilla.suse.com/1201363	self
https://bugzilla.suse.com/1201620	self
https://bugzilla.suse.com/1201863	self
https://bugzilla.suse.com/1202046	self
https://bugzilla.suse.com/1202049	self
https://bugzilla.suse.com/1202050	self
https://bugzilla.suse.com/1202051	self
https://bugzilla.suse.com/1202414	self
https://bugzilla.suse.com/1202420	self
https://bugzilla.suse.com/1202421	self
https://bugzilla.suse.com/1202511	self
https://bugzilla.suse.com/1202512	self
https://bugzilla.suse.com/1202515	self
https://bugzilla.suse.com/1202552	self
https://bugzilla.suse.com/1202599	self
https://bugzilla.suse.com/1202687	self
https://bugzilla.suse.com/1202689	self
https://bugzilla.suse.com/1202862	self
https://bugzilla.suse.com/1202962	self
https://bugzilla.suse.com/1203110	self
https://bugzilla.suse.com/1203152	self
https://bugzilla.suse.com/1203155	self
https://bugzilla.suse.com/1203194	self
https://bugzilla.suse.com/1203272	self
https://bugzilla.suse.com/1203508	self
https://bugzilla.suse.com/1203509	self
https://bugzilla.suse.com/1203796	self
https://bugzilla.suse.com/1203797	self
https://bugzilla.suse.com/1203799	self
https://bugzilla.suse.com/1203820	self
https://bugzilla.suse.com/1203924	self
https://bugzilla.suse.com/1204779	self
https://www.suse.com/security/cve/CVE-2009-0316/	self
https://www.suse.com/security/cve/CVE-2016-1248/	self
https://www.suse.com/security/cve/CVE-2017-17087/	self
https://www.suse.com/security/cve/CVE-2017-5953/	self
https://www.suse.com/security/cve/CVE-2017-6349/	self
https://www.suse.com/security/cve/CVE-2017-6350/	self
https://www.suse.com/security/cve/CVE-2021-3778/	self
https://www.suse.com/security/cve/CVE-2021-3796/	self
https://www.suse.com/security/cve/CVE-2021-3872/	self
https://www.suse.com/security/cve/CVE-2021-3875/	self
https://www.suse.com/security/cve/CVE-2021-3903/	self
https://www.suse.com/security/cve/CVE-2021-3927/	self
https://www.suse.com/security/cve/CVE-2021-3928/	self
https://www.suse.com/security/cve/CVE-2021-3968/	self
https://www.suse.com/security/cve/CVE-2021-3973/	self
https://www.suse.com/security/cve/CVE-2021-3974/	self
https://www.suse.com/security/cve/CVE-2021-3984/	self
https://www.suse.com/security/cve/CVE-2021-4019/	self
https://www.suse.com/security/cve/CVE-2021-4069/	self
https://www.suse.com/security/cve/CVE-2021-4136/	self
https://www.suse.com/security/cve/CVE-2021-4166/	self
https://www.suse.com/security/cve/CVE-2021-4192/	self
https://www.suse.com/security/cve/CVE-2021-4193/	self
https://www.suse.com/security/cve/CVE-2021-46059/	self
https://www.suse.com/security/cve/CVE-2022-0128/	self
https://www.suse.com/security/cve/CVE-2022-0213/	self
https://www.suse.com/security/cve/CVE-2022-0261/	self
https://www.suse.com/security/cve/CVE-2022-0318/	self
https://www.suse.com/security/cve/CVE-2022-0319/	self
https://www.suse.com/security/cve/CVE-2022-0351/	self
https://www.suse.com/security/cve/CVE-2022-0359/	self
https://www.suse.com/security/cve/CVE-2022-0361/	self
https://www.suse.com/security/cve/CVE-2022-0392/	self
https://www.suse.com/security/cve/CVE-2022-0407/	self
https://www.suse.com/security/cve/CVE-2022-0413/	self
https://www.suse.com/security/cve/CVE-2022-0696/	self
https://www.suse.com/security/cve/CVE-2022-1381/	self
https://www.suse.com/security/cve/CVE-2022-1420/	self
https://www.suse.com/security/cve/CVE-2022-1616/	self
https://www.suse.com/security/cve/CVE-2022-1619/	self
https://www.suse.com/security/cve/CVE-2022-1620/	self
https://www.suse.com/security/cve/CVE-2022-1720/	self
https://www.suse.com/security/cve/CVE-2022-1733/	self
https://www.suse.com/security/cve/CVE-2022-1735/	self
https://www.suse.com/security/cve/CVE-2022-1771/	self
https://www.suse.com/security/cve/CVE-2022-1785/	self
https://www.suse.com/security/cve/CVE-2022-1796/	self
https://www.suse.com/security/cve/CVE-2022-1851/	self
https://www.suse.com/security/cve/CVE-2022-1897/	self
https://www.suse.com/security/cve/CVE-2022-1898/	self
https://www.suse.com/security/cve/CVE-2022-1927/	self
https://www.suse.com/security/cve/CVE-2022-1968/	self
https://www.suse.com/security/cve/CVE-2022-2124/	self
https://www.suse.com/security/cve/CVE-2022-2125/	self
https://www.suse.com/security/cve/CVE-2022-2126/	self
https://www.suse.com/security/cve/CVE-2022-2129/	self
https://www.suse.com/security/cve/CVE-2022-2175/	self
https://www.suse.com/security/cve/CVE-2022-2182/	self
https://www.suse.com/security/cve/CVE-2022-2183/	self
https://www.suse.com/security/cve/CVE-2022-2206/	self
https://www.suse.com/security/cve/CVE-2022-2207/	self
https://www.suse.com/security/cve/CVE-2022-2208/	self
https://www.suse.com/security/cve/CVE-2022-2210/	self
https://www.suse.com/security/cve/CVE-2022-2231/	self
https://www.suse.com/security/cve/CVE-2022-2257/	self
https://www.suse.com/security/cve/CVE-2022-2264/	self
https://www.suse.com/security/cve/CVE-2022-2284/	self
https://www.suse.com/security/cve/CVE-2022-2285/	self
https://www.suse.com/security/cve/CVE-2022-2286/	self
https://www.suse.com/security/cve/CVE-2022-2287/	self
https://www.suse.com/security/cve/CVE-2022-2304/	self
https://www.suse.com/security/cve/CVE-2022-2343/	self
https://www.suse.com/security/cve/CVE-2022-2344/	self
https://www.suse.com/security/cve/CVE-2022-2345/	self
https://www.suse.com/security/cve/CVE-2022-2522/	self
https://www.suse.com/security/cve/CVE-2022-2571/	self
https://www.suse.com/security/cve/CVE-2022-2580/	self
https://www.suse.com/security/cve/CVE-2022-2581/	self
https://www.suse.com/security/cve/CVE-2022-2598/	self
https://www.suse.com/security/cve/CVE-2022-2816/	self
https://www.suse.com/security/cve/CVE-2022-2817/	self
https://www.suse.com/security/cve/CVE-2022-2819/	self
https://www.suse.com/security/cve/CVE-2022-2845/	self
https://www.suse.com/security/cve/CVE-2022-2849/	self
https://www.suse.com/security/cve/CVE-2022-2862/	self
https://www.suse.com/security/cve/CVE-2022-2874/	self
https://www.suse.com/security/cve/CVE-2022-2889/	self
https://www.suse.com/security/cve/CVE-2022-2923/	self
https://www.suse.com/security/cve/CVE-2022-2946/	self
https://www.suse.com/security/cve/CVE-2022-2980/	self
https://www.suse.com/security/cve/CVE-2022-2982/	self
https://www.suse.com/security/cve/CVE-2022-3016/	self
https://www.suse.com/security/cve/CVE-2022-3037/	self
https://www.suse.com/security/cve/CVE-2022-3099/	self
https://www.suse.com/security/cve/CVE-2022-3134/	self
https://www.suse.com/security/cve/CVE-2022-3153/	self
https://www.suse.com/security/cve/CVE-2022-3234/	self
https://www.suse.com/security/cve/CVE-2022-3235/	self
https://www.suse.com/security/cve/CVE-2022-3278/	self
https://www.suse.com/security/cve/CVE-2022-3296/	self
https://www.suse.com/security/cve/CVE-2022-3297/	self
https://www.suse.com/security/cve/CVE-2022-3324/	self
https://www.suse.com/security/cve/CVE-2022-3352/	self
https://www.suse.com/security/cve/CVE-2022-3705/	self
https://www.suse.com/security/cve/CVE-2009-0316	external
https://bugzilla.suse.com/470100	external
https://www.suse.com/security/cve/CVE-2016-1248	external
https://bugzilla.suse.com/1010685	external
https://bugzilla.suse.com/1173534	external
https://www.suse.com/security/cve/CVE-2017-17087	external
https://bugzilla.suse.com/1065958	external
https://bugzilla.suse.com/1070955	external
https://www.suse.com/security/cve/CVE-2017-5953	external
https://bugzilla.suse.com/1024724	external
https://bugzilla.suse.com/1123143	external
https://bugzilla.suse.com/1173534	external
https://www.suse.com/security/cve/CVE-2017-6349	external
https://bugzilla.suse.com/1027057	external
https://www.suse.com/security/cve/CVE-2017-6350	external
https://bugzilla.suse.com/1027053	external
https://www.suse.com/security/cve/CVE-2021-3778	external
https://bugzilla.suse.com/1190533	external
https://www.suse.com/security/cve/CVE-2021-3796	external
https://bugzilla.suse.com/1190570	external
https://www.suse.com/security/cve/CVE-2021-3872	external
https://bugzilla.suse.com/1191893	external
https://www.suse.com/security/cve/CVE-2021-3875	external
https://bugzilla.suse.com/1191770	external
https://bugzilla.suse.com/1208651	external
https://www.suse.com/security/cve/CVE-2021-3903	external
https://bugzilla.suse.com/1192167	external
https://www.suse.com/security/cve/CVE-2021-3927	external
https://bugzilla.suse.com/1192481	external
https://www.suse.com/security/cve/CVE-2021-3928	external
https://bugzilla.suse.com/1192478	external
https://www.suse.com/security/cve/CVE-2021-3968	external
https://bugzilla.suse.com/1192902	external
https://bugzilla.suse.com/1208308	external
https://bugzilla.suse.com/1208649	external
https://bugzilla.suse.com/1208651	external
https://www.suse.com/security/cve/CVE-2021-3973	external
https://bugzilla.suse.com/1192903	external
https://bugzilla.suse.com/1208308	external
https://bugzilla.suse.com/1208649	external
https://bugzilla.suse.com/1208651	external
https://www.suse.com/security/cve/CVE-2021-3974	external
https://bugzilla.suse.com/1192904	external
https://bugzilla.suse.com/1206818	external
https://bugzilla.suse.com/1208308	external
https://bugzilla.suse.com/1208651	external
https://www.suse.com/security/cve/CVE-2021-3984	external
https://bugzilla.suse.com/1193298	external
https://www.suse.com/security/cve/CVE-2021-4019	external
https://bugzilla.suse.com/1193294	external
https://www.suse.com/security/cve/CVE-2021-4069	external
https://bugzilla.suse.com/1193466	external
https://www.suse.com/security/cve/CVE-2021-4136	external
https://bugzilla.suse.com/1193905	external
https://bugzilla.suse.com/1208308	external
https://bugzilla.suse.com/1208649	external
https://bugzilla.suse.com/1208651	external
https://www.suse.com/security/cve/CVE-2021-4166	external
https://bugzilla.suse.com/1194093	external
https://www.suse.com/security/cve/CVE-2021-4192	external
https://bugzilla.suse.com/1194217	external
https://www.suse.com/security/cve/CVE-2021-4193	external
https://bugzilla.suse.com/1194216	external
https://www.suse.com/security/cve/CVE-2021-46059	external
https://bugzilla.suse.com/1194556	external
https://www.suse.com/security/cve/CVE-2022-0128	external
https://bugzilla.suse.com/1194388	external
https://www.suse.com/security/cve/CVE-2022-0213	external
https://bugzilla.suse.com/1194885	external
https://www.suse.com/security/cve/CVE-2022-0261	external
https://bugzilla.suse.com/1194872	external
https://www.suse.com/security/cve/CVE-2022-0318	external
https://bugzilla.suse.com/1195004	external
https://www.suse.com/security/cve/CVE-2022-0319	external
https://bugzilla.suse.com/1195066	external
https://www.suse.com/security/cve/CVE-2022-0351	external
https://bugzilla.suse.com/1195126	external
https://www.suse.com/security/cve/CVE-2022-0359	external
https://bugzilla.suse.com/1195203	external
https://www.suse.com/security/cve/CVE-2022-0361	external
https://bugzilla.suse.com/1195202	external
https://www.suse.com/security/cve/CVE-2022-0392	external
https://bugzilla.suse.com/1195332	external
https://www.suse.com/security/cve/CVE-2022-0407	external
https://bugzilla.suse.com/1195354	external
https://bugzilla.suse.com/1208308	external
https://bugzilla.suse.com/1208649	external
https://bugzilla.suse.com/1208651	external
https://www.suse.com/security/cve/CVE-2022-0413	external
https://bugzilla.suse.com/1195356	external
https://bugzilla.suse.com/1208308	external
https://bugzilla.suse.com/1208651	external
https://www.suse.com/security/cve/CVE-2022-0696	external
https://bugzilla.suse.com/1196361	external
https://bugzilla.suse.com/1205395	external
https://www.suse.com/security/cve/CVE-2022-1381	external
https://bugzilla.suse.com/1198596	external
https://www.suse.com/security/cve/CVE-2022-1420	external
https://bugzilla.suse.com/1198748	external
https://www.suse.com/security/cve/CVE-2022-1616	external
https://bugzilla.suse.com/1199331	external
https://www.suse.com/security/cve/CVE-2022-1619	external
https://bugzilla.suse.com/1199333	external
https://www.suse.com/security/cve/CVE-2022-1620	external
https://bugzilla.suse.com/1199334	external
https://www.suse.com/security/cve/CVE-2022-1720	external
https://bugzilla.suse.com/1200732	external
https://www.suse.com/security/cve/CVE-2022-1733	external
https://bugzilla.suse.com/1199655	external
https://www.suse.com/security/cve/CVE-2022-1735	external
https://bugzilla.suse.com/1199651	external
https://www.suse.com/security/cve/CVE-2022-1771	external
https://bugzilla.suse.com/1199693	external
https://www.suse.com/security/cve/CVE-2022-1785	external
https://bugzilla.suse.com/1199745	external
https://www.suse.com/security/cve/CVE-2022-1796	external
https://bugzilla.suse.com/1199747	external
https://www.suse.com/security/cve/CVE-2022-1851	external
https://bugzilla.suse.com/1199936	external
https://www.suse.com/security/cve/CVE-2022-1897	external
https://bugzilla.suse.com/1200010	external
https://www.suse.com/security/cve/CVE-2022-1898	external
https://bugzilla.suse.com/1200011	external
https://www.suse.com/security/cve/CVE-2022-1927	external
https://bugzilla.suse.com/1200012	external
https://www.suse.com/security/cve/CVE-2022-1968	external
https://bugzilla.suse.com/1200270	external
https://www.suse.com/security/cve/CVE-2022-2124	external
https://bugzilla.suse.com/1200697	external
https://www.suse.com/security/cve/CVE-2022-2125	external
https://bugzilla.suse.com/1200698	external
https://bugzilla.suse.com/1205395	external
https://www.suse.com/security/cve/CVE-2022-2126	external
https://bugzilla.suse.com/1200700	external
https://www.suse.com/security/cve/CVE-2022-2129	external
https://bugzilla.suse.com/1200701	external
https://www.suse.com/security/cve/CVE-2022-2175	external
https://bugzilla.suse.com/1200904	external
https://www.suse.com/security/cve/CVE-2022-2182	external
https://bugzilla.suse.com/1200903	external
https://www.suse.com/security/cve/CVE-2022-2183	external
https://bugzilla.suse.com/1200902	external
https://www.suse.com/security/cve/CVE-2022-2206	external
https://bugzilla.suse.com/1201155	external
https://www.suse.com/security/cve/CVE-2022-2207	external
https://bugzilla.suse.com/1201153	external
https://www.suse.com/security/cve/CVE-2022-2208	external
https://bugzilla.suse.com/1201152	external
https://www.suse.com/security/cve/CVE-2022-2210	external
https://bugzilla.suse.com/1201151	external
https://www.suse.com/security/cve/CVE-2022-2231	external
https://bugzilla.suse.com/1201150	external
https://www.suse.com/security/cve/CVE-2022-2257	external
https://bugzilla.suse.com/1201154	external
https://www.suse.com/security/cve/CVE-2022-2264	external
https://bugzilla.suse.com/1201132	external
https://www.suse.com/security/cve/CVE-2022-2284	external
https://bugzilla.suse.com/1201133	external
https://www.suse.com/security/cve/CVE-2022-2285	external
https://bugzilla.suse.com/1201134	external
https://www.suse.com/security/cve/CVE-2022-2286	external
https://bugzilla.suse.com/1201135	external
https://www.suse.com/security/cve/CVE-2022-2287	external
https://bugzilla.suse.com/1201136	external
https://www.suse.com/security/cve/CVE-2022-2304	external
https://bugzilla.suse.com/1201249	external
https://www.suse.com/security/cve/CVE-2022-2343	external
https://bugzilla.suse.com/1201356	external
https://www.suse.com/security/cve/CVE-2022-2344	external
https://bugzilla.suse.com/1201359	external
https://www.suse.com/security/cve/CVE-2022-2345	external
https://bugzilla.suse.com/1201363	external
https://www.suse.com/security/cve/CVE-2022-2522	external
https://bugzilla.suse.com/1201863	external
https://www.suse.com/security/cve/CVE-2022-2571	external
https://bugzilla.suse.com/1202046	external
https://www.suse.com/security/cve/CVE-2022-2580	external
https://bugzilla.suse.com/1202049	external
https://www.suse.com/security/cve/CVE-2022-2581	external
https://bugzilla.suse.com/1202050	external
https://www.suse.com/security/cve/CVE-2022-2598	external
https://bugzilla.suse.com/1202051	external
https://www.suse.com/security/cve/CVE-2022-2816	external
https://bugzilla.suse.com/1202421	external
https://bugzilla.suse.com/1203576	external
https://www.suse.com/security/cve/CVE-2022-2817	external
https://bugzilla.suse.com/1202420	external
https://www.suse.com/security/cve/CVE-2022-2819	external
https://bugzilla.suse.com/1202414	external
https://bugzilla.suse.com/1203576	external
https://www.suse.com/security/cve/CVE-2022-2845	external
https://bugzilla.suse.com/1202515	external
https://www.suse.com/security/cve/CVE-2022-2849	external
https://bugzilla.suse.com/1202512	external
https://www.suse.com/security/cve/CVE-2022-2862	external
https://bugzilla.suse.com/1202511	external
https://www.suse.com/security/cve/CVE-2022-2874	external
https://bugzilla.suse.com/1202552	external
https://www.suse.com/security/cve/CVE-2022-2889	external
https://bugzilla.suse.com/1202599	external
https://www.suse.com/security/cve/CVE-2022-2923	external
https://bugzilla.suse.com/1202687	external
https://www.suse.com/security/cve/CVE-2022-2946	external
https://bugzilla.suse.com/1202689	external
https://www.suse.com/security/cve/CVE-2022-2980	external
https://bugzilla.suse.com/1203155	external
https://www.suse.com/security/cve/CVE-2022-2982	external
https://bugzilla.suse.com/1203152	external
https://www.suse.com/security/cve/CVE-2022-3016	external
https://bugzilla.suse.com/1202862	external
https://www.suse.com/security/cve/CVE-2022-3037	external
https://bugzilla.suse.com/1202962	external
https://www.suse.com/security/cve/CVE-2022-3099	external
https://bugzilla.suse.com/1203110	external
https://www.suse.com/security/cve/CVE-2022-3134	external
https://bugzilla.suse.com/1203194	external
https://www.suse.com/security/cve/CVE-2022-3153	external
https://bugzilla.suse.com/1203272	external
https://www.suse.com/security/cve/CVE-2022-3234	external
https://bugzilla.suse.com/1203508	external
https://bugzilla.suse.com/1206240	external
https://bugzilla.suse.com/1208002	external
https://bugzilla.suse.com/1208308	external
https://bugzilla.suse.com/1208651	external
https://bugzilla.suse.com/1209329	external
https://www.suse.com/security/cve/CVE-2022-3235	external
https://bugzilla.suse.com/1203509	external
https://www.suse.com/security/cve/CVE-2022-3278	external
https://bugzilla.suse.com/1203799	external
https://www.suse.com/security/cve/CVE-2022-3296	external
https://bugzilla.suse.com/1203796	external
https://bugzilla.suse.com/1205395	external
https://www.suse.com/security/cve/CVE-2022-3297	external
https://bugzilla.suse.com/1203797	external
https://www.suse.com/security/cve/CVE-2022-3324	external
https://bugzilla.suse.com/1203820	external
https://bugzilla.suse.com/1205395	external
https://bugzilla.suse.com/1206240	external
https://www.suse.com/security/cve/CVE-2022-3352	external
https://bugzilla.suse.com/1203924	external
https://www.suse.com/security/cve/CVE-2022-3705	external
https://bugzilla.suse.com/1204779	external

JSON

To clipboard

Loading 2.7 MB of JSON…

CVE-2009-0316 (GCVE-0-2009-0316)

Vulnerability from cvelistv5 – Published: 2009-01-28 11:00 – Updated: 2024-08-07 04:31

Summary

Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

11 references

URL	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937	x_refsource_CONFIRM
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305	x_refsource_MISC
http://www.securityfocus.com/bid/33447	vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2009/01/26/2	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.nabble.com/Bug-484305%3A-bicyclerepair…	mailing-listx_refsource_MLIST
https://svn.pardus.org.tr/pardus/2008/application…	x_refsource_CONFIRM
http://support.apple.com/kb/HT4077	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://bugzilla.redhat.com/show_bug.cgi?id=481565	x_refsource_CONFIRM

Date Public

2009-01-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:31:25.468Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305"
          },
          {
            "name": "33447",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/33447"
          },
          {
            "name": "[oss-security] 20090126 CVE request -- Python \u003c 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/01/26/2"
          },
          {
            "name": "APPLE-SA-2010-03-29-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
          },
          {
            "name": "[debian-bugs-rc] 20080805 Bug#484305: bicyclerepair: bike.vim imports untrusted python files from cwd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4077"
          },
          {
            "name": "MDVSA-2009:047",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:047"
          },
          {
            "name": "vim-pysyssetargv-privilege-escalation(48275)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48275"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=481565"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-01-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305"
        },
        {
          "name": "33447",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/33447"
        },
        {
          "name": "[oss-security] 20090126 CVE request -- Python \u003c 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/01/26/2"
        },
        {
          "name": "APPLE-SA-2010-03-29-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
        },
        {
          "name": "[debian-bugs-rc] 20080805 Bug#484305: bicyclerepair: bike.vim imports untrusted python files from cwd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4077"
        },
        {
          "name": "MDVSA-2009:047",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:047"
        },
        {
          "name": "vim-pysyssetargv-privilege-escalation(48275)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48275"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=481565"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0316",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305",
              "refsource": "MISC",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305"
            },
            {
              "name": "33447",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/33447"
            },
            {
              "name": "[oss-security] 20090126 CVE request -- Python \u003c 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2009/01/26/2"
            },
            {
              "name": "APPLE-SA-2010-03-29-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
            },
            {
              "name": "[debian-bugs-rc] 20080805 Bug#484305: bicyclerepair: bike.vim imports untrusted python files from cwd",
              "refsource": "MLIST",
              "url": "http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html"
            },
            {
              "name": "https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045",
              "refsource": "CONFIRM",
              "url": "https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045"
            },
            {
              "name": "http://support.apple.com/kb/HT4077",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4077"
            },
            {
              "name": "MDVSA-2009:047",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:047"
            },
            {
              "name": "vim-pysyssetargv-privilege-escalation(48275)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48275"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=481565",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=481565"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0316",
    "datePublished": "2009-01-28T11:00:00.000Z",
    "dateReserved": "2009-01-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T04:31:25.468Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1248 (GCVE-0-2016-1248)

Vulnerability from cvelistv5 – Published: 2016-11-23 15:00 – Updated: 2024-08-05 22:48

Summary

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.

Severity

No CVSS data available.

CWE

OS command injection

Assigner

debian mitre root

References

13 references

URL	Tags
https://lists.debian.org/debian-security-announce…	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2016/11/22/20	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201701-29	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3722	vendor-advisoryx_refsource_DEBIAN
https://github.com/vim/vim/commit/d0b5138ba4bccff…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2016…	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-3139-1	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1037338	vdb-entryx_refsource_SECTRACK
https://github.com/neovim/neovim/commit/4fad66fbe…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94478	vdb-entryx_refsource_BID
https://github.com/vim/vim/releases/tag/v8.0.0056	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2972.html	vendor-advisoryx_refsource_REDHAT
https://anonscm.debian.org/cgit/pkg-vim/vim.git/t…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	vim before patch 8.0.0056	Affected: vim before patch 8.0.0056

Date Public

2016-11-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:48:13.669Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-security-announce/2016/msg00305.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2016/11/22/20"
          },
          {
            "name": "GLSA-201701-29",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-29"
          },
          {
            "name": "DSA-3722",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3722"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/d0b5138ba4bccff8a744c99836041ef6322ed39a"
          },
          {
            "name": "[debian-lts-announce] 20161122 [SECURITY] [DLA 718-1] vim security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2016/11/msg00025.html"
          },
          {
            "name": "USN-3139-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3139-1"
          },
          {
            "name": "1037338",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037338"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/neovim/neovim/commit/4fad66fbe637818b6b3d6bc5d21923ba72795040"
          },
          {
            "name": "94478",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94478"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/releases/tag/v8.0.0056"
          },
          {
            "name": "RHSA-2016:2972",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2972.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://anonscm.debian.org/cgit/pkg-vim/vim.git/tree/debian/changelog"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim before patch 8.0.0056",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "vim before patch 8.0.0056"
            }
          ]
        }
      ],
      "datePublic": "2016-11-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "vim before patch 8.0.0056 does not properly validate values for the \u0027filetype\u0027, \u0027syntax\u0027 and \u0027keymap\u0027 options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "OS command injection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-01T15:57:01.000Z",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://lists.debian.org/debian-security-announce/2016/msg00305.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://openwall.com/lists/oss-security/2016/11/22/20"
        },
        {
          "name": "GLSA-201701-29",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-29"
        },
        {
          "name": "DSA-3722",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3722"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vim/vim/commit/d0b5138ba4bccff8a744c99836041ef6322ed39a"
        },
        {
          "name": "[debian-lts-announce] 20161122 [SECURITY] [DLA 718-1] vim security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2016/11/msg00025.html"
        },
        {
          "name": "USN-3139-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3139-1"
        },
        {
          "name": "1037338",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037338"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/neovim/neovim/commit/4fad66fbe637818b6b3d6bc5d21923ba72795040"
        },
        {
          "name": "94478",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94478"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vim/vim/releases/tag/v8.0.0056"
        },
        {
          "name": "RHSA-2016:2972",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2972.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://anonscm.debian.org/cgit/pkg-vim/vim.git/tree/debian/changelog"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2016-1248",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "vim before patch 8.0.0056",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "vim before patch 8.0.0056"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "vim before patch 8.0.0056 does not properly validate values for the \u0027filetype\u0027, \u0027syntax\u0027 and \u0027keymap\u0027 options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "OS command injection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lists.debian.org/debian-security-announce/2016/msg00305.html",
              "refsource": "CONFIRM",
              "url": "https://lists.debian.org/debian-security-announce/2016/msg00305.html"
            },
            {
              "name": "http://openwall.com/lists/oss-security/2016/11/22/20",
              "refsource": "CONFIRM",
              "url": "http://openwall.com/lists/oss-security/2016/11/22/20"
            },
            {
              "name": "GLSA-201701-29",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-29"
            },
            {
              "name": "DSA-3722",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3722"
            },
            {
              "name": "https://github.com/vim/vim/commit/d0b5138ba4bccff8a744c99836041ef6322ed39a",
              "refsource": "CONFIRM",
              "url": "https://github.com/vim/vim/commit/d0b5138ba4bccff8a744c99836041ef6322ed39a"
            },
            {
              "name": "[debian-lts-announce] 20161122 [SECURITY] [DLA 718-1] vim security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2016/11/msg00025.html"
            },
            {
              "name": "USN-3139-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3139-1"
            },
            {
              "name": "1037338",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037338"
            },
            {
              "name": "https://github.com/neovim/neovim/commit/4fad66fbe637818b6b3d6bc5d21923ba72795040",
              "refsource": "CONFIRM",
              "url": "https://github.com/neovim/neovim/commit/4fad66fbe637818b6b3d6bc5d21923ba72795040"
            },
            {
              "name": "94478",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94478"
            },
            {
              "name": "https://github.com/vim/vim/releases/tag/v8.0.0056",
              "refsource": "CONFIRM",
              "url": "https://github.com/vim/vim/releases/tag/v8.0.0056"
            },
            {
              "name": "RHSA-2016:2972",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2972.html"
            },
            {
              "name": "https://anonscm.debian.org/cgit/pkg-vim/vim.git/tree/debian/changelog",
              "refsource": "CONFIRM",
              "url": "https://anonscm.debian.org/cgit/pkg-vim/vim.git/tree/debian/changelog"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2016-1248",
    "datePublished": "2016-11-23T15:00:00.000Z",
    "dateReserved": "2015-12-27T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:48:13.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-17087 (GCVE-0-2017-17087)

Vulnerability from cvelistv5 – Published: 2017-12-01 08:00 – Updated: 2024-08-05 20:43

Summary

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://groups.google.com/d/msg/vim_dev/sRT9BtjLW…	x_refsource_MISC
http://openwall.com/lists/oss-security/2017/11/27/2	x_refsource_MISC
http://security.cucumberlinux.com/security/detail…	x_refsource_MISC
https://github.com/vim/vim/commit/5a73e0ca54c77e0…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4582-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Date Public

2017-12-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:43:59.409Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJ"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2017/11/27/2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://security.cucumberlinux.com/security/details.php?id=166"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8"
          },
          {
            "name": "[debian-lts-announce] 20190803 [SECURITY] [DLA 1871-1] vim security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html"
          },
          {
            "name": "USN-4582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4582-1/"
          },
          {
            "name": "[debian-lts-announce] 20220110 [SECURITY] [DLA 2876-1] vim security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-12-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor\u0027s primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-01-10T23:06:12.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJ"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2017/11/27/2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://security.cucumberlinux.com/security/details.php?id=166"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8"
        },
        {
          "name": "[debian-lts-announce] 20190803 [SECURITY] [DLA 1871-1] vim security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html"
        },
        {
          "name": "USN-4582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4582-1/"
        },
        {
          "name": "[debian-lts-announce] 20220110 [SECURITY] [DLA 2876-1] vim security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-17087",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor\u0027s primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJ",
              "refsource": "MISC",
              "url": "https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJ"
            },
            {
              "name": "http://openwall.com/lists/oss-security/2017/11/27/2",
              "refsource": "MISC",
              "url": "http://openwall.com/lists/oss-security/2017/11/27/2"
            },
            {
              "name": "http://security.cucumberlinux.com/security/details.php?id=166",
              "refsource": "MISC",
              "url": "http://security.cucumberlinux.com/security/details.php?id=166"
            },
            {
              "name": "https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8",
              "refsource": "MISC",
              "url": "https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8"
            },
            {
              "name": "[debian-lts-announce] 20190803 [SECURITY] [DLA 1871-1] vim security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html"
            },
            {
              "name": "USN-4582-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4582-1/"
            },
            {
              "name": "[debian-lts-announce] 20220110 [SECURITY] [DLA 2876-1] vim security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-17087",
    "datePublished": "2017-12-01T08:00:00.000Z",
    "dateReserved": "2017-12-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T20:43:59.409Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5953 (GCVE-0-2017-5953)

Vulnerability from cvelistv5 – Published: 2017-02-10 06:51 – Updated: 2024-08-05 15:18

Summary

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://security.gentoo.org/glsa/201706-26	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/96217	vdb-entryx_refsource_BID
http://www.debian.org/security/2017/dsa-3786	vendor-advisoryx_refsource_DEBIAN
https://github.com/vim/vim/commit/399c297aa93afe2…	x_refsource_CONFIRM
https://groups.google.com/forum/#%21topic/vim_dev…	x_refsource_CONFIRM
https://usn.ubuntu.com/4016-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4309-1/	vendor-advisoryx_refsource_UBUNTU

Date Public

2017-02-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.173Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201706-26",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-26"
          },
          {
            "name": "96217",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96217"
          },
          {
            "name": "DSA-3786",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3786"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/t-3RSdEnrHY"
          },
          {
            "name": "USN-4016-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4016-1/"
          },
          {
            "name": "USN-4309-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4309-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-30T19:06:05.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201706-26",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-26"
        },
        {
          "name": "96217",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96217"
        },
        {
          "name": "DSA-3786",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3786"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/t-3RSdEnrHY"
        },
        {
          "name": "USN-4016-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4016-1/"
        },
        {
          "name": "USN-4309-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4309-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-5953",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201706-26",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-26"
            },
            {
              "name": "96217",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96217"
            },
            {
              "name": "DSA-3786",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3786"
            },
            {
              "name": "https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d",
              "refsource": "CONFIRM",
              "url": "https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/t-3RSdEnrHY",
              "refsource": "CONFIRM",
              "url": "https://groups.google.com/forum/#!topic/vim_dev/t-3RSdEnrHY"
            },
            {
              "name": "USN-4016-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4016-1/"
            },
            {
              "name": "USN-4309-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4309-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-5953",
    "datePublished": "2017-02-10T06:51:00.000Z",
    "dateReserved": "2017-02-10T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:18:49.173Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-6349 (GCVE-0-2017-6349)

Vulnerability from cvelistv5 – Published: 2017-02-27 07:25 – Updated: 2024-08-05 15:25

Summary

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://security.gentoo.org/glsa/201706-26	vendor-advisoryx_refsource_GENTOO
http://www.securitytracker.com/id/1037949	vdb-entryx_refsource_SECTRACK
https://github.com/vim/vim/commit/3eb1637b1bba195…	x_refsource_MISC
http://www.securityfocus.com/bid/96451	vdb-entryx_refsource_BID
https://groups.google.com/forum/#%21topic/vim_dev…	x_refsource_MISC
https://groups.google.com/forum/#%21topic/vim_dev…	x_refsource_MISC
https://usn.ubuntu.com/4309-1/	vendor-advisoryx_refsource_UBUNTU

Date Public

2017-02-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:25:49.193Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201706-26",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-26"
          },
          {
            "name": "1037949",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037949"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c"
          },
          {
            "name": "96451",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96451"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/LAgsTcdSfNA"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
          },
          {
            "name": "USN-4309-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4309-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-30T19:06:03.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201706-26",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-26"
        },
        {
          "name": "1037949",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037949"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c"
        },
        {
          "name": "96451",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96451"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/LAgsTcdSfNA"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
        },
        {
          "name": "USN-4309-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4309-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-6349",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201706-26",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-26"
            },
            {
              "name": "1037949",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037949"
            },
            {
              "name": "https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c",
              "refsource": "MISC",
              "url": "https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c"
            },
            {
              "name": "96451",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96451"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/LAgsTcdSfNA",
              "refsource": "MISC",
              "url": "https://groups.google.com/forum/#!topic/vim_dev/LAgsTcdSfNA"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y",
              "refsource": "MISC",
              "url": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y"
            },
            {
              "name": "USN-4309-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4309-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-6349",
    "datePublished": "2017-02-27T07:25:00.000Z",
    "dateReserved": "2017-02-26T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:25:49.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-6350 (GCVE-0-2017-6350)

Vulnerability from cvelistv5 – Published: 2017-02-27 07:25 – Updated: 2024-08-05 15:25

Summary

An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://security.gentoo.org/glsa/201706-26	vendor-advisoryx_refsource_GENTOO
http://www.securitytracker.com/id/1037949	vdb-entryx_refsource_SECTRACK
https://github.com/vim/vim/commit/0c8485f0e493146…	x_refsource_MISC
https://groups.google.com/forum/#%21topic/vim_dev…	x_refsource_MISC
http://www.securityfocus.com/bid/96448	vdb-entryx_refsource_BID
https://groups.google.com/forum/#%21topic/vim_dev…	x_refsource_MISC
https://usn.ubuntu.com/4309-1/	vendor-advisoryx_refsource_UBUNTU

Date Public

2017-02-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:25:49.084Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201706-26",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-26"
          },
          {
            "name": "1037949",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037949"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
          },
          {
            "name": "96448",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96448"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
          },
          {
            "name": "USN-4309-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4309-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-30T19:06:04.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201706-26",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-26"
        },
        {
          "name": "1037949",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037949"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q"
        },
        {
          "name": "96448",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96448"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y"
        },
        {
          "name": "USN-4309-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4309-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-6350",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201706-26",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-26"
            },
            {
              "name": "1037949",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037949"
            },
            {
              "name": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75",
              "refsource": "MISC",
              "url": "https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q",
              "refsource": "MISC",
              "url": "https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q"
            },
            {
              "name": "96448",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96448"
            },
            {
              "name": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y",
              "refsource": "MISC",
              "url": "https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y"
            },
            {
              "name": "USN-4309-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4309-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-6350",
    "datePublished": "2017-02-27T07:25:00.000Z",
    "dateReserved": "2017-02-26T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:25:49.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3778 (GCVE-0-2021-3778)

Vulnerability from cvelistv5 – Published: 2021-09-15 00:00 – Updated: 2024-08-03 17:09

Title

Heap-based Buffer Overflow in vim/vim

Summary

vim is vulnerable to Heap-based Buffer Overflow

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

@huntrdev

References

9 references

URL	Tags
https://huntr.dev/bounties/d9c17308-2c99-4f9f-a70…
https://github.com/vim/vim/commit/65b605665997fad…
http://www.openwall.com/lists/oss-security/2021/10/01/1	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://security.netapp.com/advisory/ntap-2022111…

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2.3409 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:08.823Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/d9c17308-2c99-4f9f-a706-f7f72c24c273"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/65b605665997fad54ef39a93199e305af2fe4d7f"
          },
          {
            "name": "[oss-security] 20210930 3 new CVE\u0027s in vim",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/01/1"
          },
          {
            "name": "FEDORA-2021-968f57ec98",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/"
          },
          {
            "name": "FEDORA-2021-84f4cf3244",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
          },
          {
            "name": "FEDORA-2021-6988830606",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
          },
          {
            "name": "[debian-lts-announce] 20220110 [SECURITY] [DLA 2876-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221118-0003/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2.3409",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "vim is vulnerable to Heap-based Buffer Overflow"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-18T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/d9c17308-2c99-4f9f-a706-f7f72c24c273"
        },
        {
          "url": "https://github.com/vim/vim/commit/65b605665997fad54ef39a93199e305af2fe4d7f"
        },
        {
          "name": "[oss-security] 20210930 3 new CVE\u0027s in vim",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/01/1"
        },
        {
          "name": "FEDORA-2021-968f57ec98",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/"
        },
        {
          "name": "FEDORA-2021-84f4cf3244",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
        },
        {
          "name": "FEDORA-2021-6988830606",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
        },
        {
          "name": "[debian-lts-announce] 20220110 [SECURITY] [DLA 2876-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221118-0003/"
        }
      ],
      "source": {
        "advisory": "d9c17308-2c99-4f9f-a706-f7f72c24c273",
        "discovery": "EXTERNAL"
      },
      "title": "Heap-based Buffer Overflow in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2021-3778",
    "datePublished": "2021-09-15T00:00:00.000Z",
    "dateReserved": "2021-09-07T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:08.823Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3796 (GCVE-0-2021-3796)

Vulnerability from cvelistv5 – Published: 2021-09-15 00:00 – Updated: 2024-08-03 17:09

Title

Use After Free in vim/vim

Summary

vim is vulnerable to Use After Free

Severity

8.2 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

CWE

CWE-416 - Use After Free

Assigner

@huntrdev

References

9 references

URL	Tags
https://huntr.dev/bounties/ab60b7f3-6fb1-4ac2-a4f…
https://github.com/vim/vim/commit/35a9a00afcb2089…
http://www.openwall.com/lists/oss-security/2021/10/01/1	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.gentoo.org/glsa/202208-32	vendor-advisory
https://security.netapp.com/advisory/ntap-2022111…

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , ≤ 8.2.3428 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:08.968Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/ab60b7f3-6fb1-4ac2-a4fa-4d592e08008d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3"
          },
          {
            "name": "[oss-security] 20210930 3 new CVE\u0027s in vim",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/01/1"
          },
          {
            "name": "FEDORA-2021-968f57ec98",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/"
          },
          {
            "name": "FEDORA-2021-84f4cf3244",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
          },
          {
            "name": "FEDORA-2021-6988830606",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
          },
          {
            "name": "[debian-lts-announce] 20220110 [SECURITY] [DLA 2876-1] vim security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221118-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThanOrEqual": "8.2.3428",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "vim is vulnerable to Use After Free"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-18T00:00:00.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "url": "https://huntr.dev/bounties/ab60b7f3-6fb1-4ac2-a4fa-4d592e08008d"
        },
        {
          "url": "https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3"
        },
        {
          "name": "[oss-security] 20210930 3 new CVE\u0027s in vim",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/01/1"
        },
        {
          "name": "FEDORA-2021-968f57ec98",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/"
        },
        {
          "name": "FEDORA-2021-84f4cf3244",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
        },
        {
          "name": "FEDORA-2021-6988830606",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
        },
        {
          "name": "[debian-lts-announce] 20220110 [SECURITY] [DLA 2876-1] vim security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221118-0004/"
        }
      ],
      "source": {
        "advisory": "ab60b7f3-6fb1-4ac2-a4fa-4d592e08008d",
        "discovery": "EXTERNAL"
      },
      "title": "Use After Free in vim/vim"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2021-3796",
    "datePublished": "2021-09-15T00:00:00.000Z",
    "dateReserved": "2021-09-11T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:08.968Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3872 (GCVE-0-2021-3872)

Vulnerability from cvelistv5 – Published: 2021-10-19 12:30 – Updated: 2025-11-03 20:33

Title

Heap-based Buffer Overflow in vim/vim

Summary

vim is vulnerable to Heap-based Buffer Overflow

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

@huntrdev

References

7 references

URL	Tags
https://huntr.dev/bounties/c958013b-1c09-4939-92c…	x_refsource_CONFIRM
https://github.com/vim/vim/commit/826bfe4bbd75941…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/202208-32	vendor-advisoryx_refsource_GENTOO
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2.3487 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:33:49.821Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b"
          },
          {
            "name": "FEDORA-2021-84f4cf3244",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
          },
          {
            "name": "FEDORA-2021-6988830606",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
          },
          {
            "name": "[debian-lts-announce] 20220311 [SECURITY] [DLA 2947-1] vim security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2.3487",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "vim is vulnerable to Heap-based Buffer Overflow"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-21T07:07:02.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b"
        },
        {
          "name": "FEDORA-2021-84f4cf3244",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
        },
        {
          "name": "FEDORA-2021-6988830606",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
        },
        {
          "name": "[debian-lts-announce] 20220311 [SECURITY] [DLA 2947-1] vim security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        }
      ],
      "source": {
        "advisory": "c958013b-1c09-4939-92ca-92f50aa169e8",
        "discovery": "EXTERNAL"
      },
      "title": "Heap-based Buffer Overflow in vim/vim",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@huntr.dev",
          "ID": "CVE-2021-3872",
          "STATE": "PUBLIC",
          "TITLE": "Heap-based Buffer Overflow in vim/vim"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "vim/vim",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.2.3487"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "vim"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "vim is vulnerable to Heap-based Buffer Overflow"
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122 Heap-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8",
              "refsource": "CONFIRM",
              "url": "https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8"
            },
            {
              "name": "https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b",
              "refsource": "MISC",
              "url": "https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b"
            },
            {
              "name": "FEDORA-2021-84f4cf3244",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
            },
            {
              "name": "FEDORA-2021-6988830606",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
            },
            {
              "name": "[debian-lts-announce] 20220311 [SECURITY] [DLA 2947-1] vim security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html"
            },
            {
              "name": "GLSA-202208-32",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-32"
            }
          ]
        },
        "source": {
          "advisory": "c958013b-1c09-4939-92ca-92f50aa169e8",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2021-3872",
    "datePublished": "2021-10-19T12:30:34.000Z",
    "dateReserved": "2021-10-08T00:00:00.000Z",
    "dateUpdated": "2025-11-03T20:33:49.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-3875 (GCVE-0-2021-3875)

Vulnerability from cvelistv5 – Published: 2021-10-15 13:40 – Updated: 2024-08-03 17:09

Title

Heap-based Buffer Overflow in vim/vim

Summary

vim is vulnerable to Heap-based Buffer Overflow

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

@huntrdev

References

6 references

URL	Tags
https://huntr.dev/bounties/5cdbc168-6ba1-4bc2-ba6…	x_refsource_CONFIRM
https://github.com/vim/vim/commit/35a319b77f89774…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://www.openwall.com/lists/oss-security/2022/01/15/1	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/202208-32	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
vim	vim/vim	Affected: unspecified , < 8.2.3489 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.583Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/5cdbc168-6ba1-4bc2-ba6c-28be12166a53"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vim/vim/commit/35a319b77f897744eec1155b736e9372c9c5575f"
          },
          {
            "name": "FEDORA-2021-84f4cf3244",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
          },
          {
            "name": "FEDORA-2021-6988830606",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
          },
          {
            "name": "[oss-security] 20220114 Re: 3 new CVE\u0027s in vim",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/15/1"
          },
          {
            "name": "GLSA-202208-32",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-32"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vim/vim",
          "vendor": "vim",
          "versions": [
            {
              "lessThan": "8.2.3489",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "vim is vulnerable to Heap-based Buffer Overflow"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-21T05:08:24.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://huntr.dev/bounties/5cdbc168-6ba1-4bc2-ba6c-28be12166a53"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vim/vim/commit/35a319b77f897744eec1155b736e9372c9c5575f"
        },
        {
          "name": "FEDORA-2021-84f4cf3244",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
        },
        {
          "name": "FEDORA-2021-6988830606",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
        },
        {
          "name": "[oss-security] 20220114 Re: 3 new CVE\u0027s in vim",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/15/1"
        },
        {
          "name": "GLSA-202208-32",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-32"
        }
      ],
      "source": {
        "advisory": "5cdbc168-6ba1-4bc2-ba6c-28be12166a53",
        "discovery": "EXTERNAL"
      },
      "title": "Heap-based Buffer Overflow in vim/vim",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@huntr.dev",
          "ID": "CVE-2021-3875",
          "STATE": "PUBLIC",
          "TITLE": "Heap-based Buffer Overflow in vim/vim"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "vim/vim",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.2.3489"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "vim"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "vim is vulnerable to Heap-based Buffer Overflow"
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122 Heap-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://huntr.dev/bounties/5cdbc168-6ba1-4bc2-ba6c-28be12166a53",
              "refsource": "CONFIRM",
              "url": "https://huntr.dev/bounties/5cdbc168-6ba1-4bc2-ba6c-28be12166a53"
            },
            {
              "name": "https://github.com/vim/vim/commit/35a319b77f897744eec1155b736e9372c9c5575f",
              "refsource": "MISC",
              "url": "https://github.com/vim/vim/commit/35a319b77f897744eec1155b736e9372c9c5575f"
            },
            {
              "name": "FEDORA-2021-84f4cf3244",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/"
            },
            {
              "name": "FEDORA-2021-6988830606",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/"
            },
            {
              "name": "[oss-security] 20220114 Re: 3 new CVE\u0027s in vim",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/15/1"
            },
            {
              "name": "GLSA-202208-32",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-32"
            }
          ]
        },
        "source": {
          "advisory": "5cdbc168-6ba1-4bc2-ba6c-28be12166a53",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2021-3875",
    "datePublished": "2021-10-15T13:40:20.000Z",
    "dateReserved": "2021-10-09T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.583Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2022:4619-1

CVE-2009-0316 (GCVE-0-2009-0316)

CVE-2016-1248 (GCVE-0-2016-1248)

CVE-2017-17087 (GCVE-0-2017-17087)

CVE-2017-5953 (GCVE-0-2017-5953)

CVE-2017-6349 (GCVE-0-2017-6349)

CVE-2017-6350 (GCVE-0-2017-6350)

CVE-2021-3778 (GCVE-0-2021-3778)

CVE-2021-3796 (GCVE-0-2021-3796)

CVE-2021-3872 (GCVE-0-2021-3872)

CVE-2021-3875 (GCVE-0-2021-3875)

Tags

Sightings

Nomenclature

Related by attack behaviour