Lucene search
CloudLinuxCLSA-2022:1654529495HistoryJun 06, 2022 - 3:31 p.m.
Fixed CVEs in vim: CVE-2022-1785, CVE-2022-1796
2022-06-0615:31:35
repo.cloudlinux.com
38
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.3%
- CVE-2022-1785: fix out-of-bounds write by disallowing changing window
in substitute expression - CVE-2022-1796: fix use after free by making a copy of a line
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Centos | 6 | x86_64 | vim-minimal | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els14.src.rpm |
| Centos | 6 | x86_64 | vim-x11 | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els14.src.rpm |
| Centos | 6 | x86_64 | vim-enhanced | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els14.src.rpm |
| Centos | 6 | x86_64 | vim-filesystem | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els14.src.rpm |
| Centos | 6 | x86_64 | vim-common | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els14.src.rpm |
Related
veracode
veracode
Out-of-bounds Write
2022-08-09 13:37:17
Use After Free
2022-06-05 05:27:36
debiancve
debiancve
CVE-2022-1785
2022-05-19 13:15:00
CVE-2022-1796
2022-05-19 16:15:00
alpinelinux
alpinelinux
CVE-2022-1785
2022-05-19 13:15:00
CVE-2022-1796
2022-05-19 16:15:00
huntr
huntr
Out-of-bounds write in function vim_regsub_both
2022-05-16 13:43:21
heap-use-after-free in function find_pattern_in_path
2022-05-16 10:58:32
ubuntucve
ubuntucve
CVE-2022-1796
2022-05-19 00:00:00
CVE-2022-1785
2022-05-19 00:00:00
prion
prion
Design/Logic Flaw
2022-05-19 13:15:00
Design/Logic Flaw
2022-05-19 16:15:00
cbl_mariner
cbl_mariner
CVE-2022-1785 affecting package vim 8.2.4774-1
2022-06-15 17:03:10
CVE-2022-1796 affecting package vim 8.2.4774-1
2022-06-15 17:03:10
CVE-2022-1796 affecting package vim 8.2.4925-1
2022-06-26 03:29:39
cve
cve
CVE-2022-1796
2022-05-19 16:15:00
CVE-2022-1785
2022-05-19 13:15:00
redhatcve
redhatcve
CVE-2022-1796
2022-06-07 04:26:52
CVE-2022-1785
2022-06-07 08:25:42
nessus
nessus
CBL Mariner 2.0 Security Update: vim (CVE-2022-1785)
2023-03-28 00:00:00
CBL Mariner 2.0 Security Update: vim (CVE-2022-1796)
2023-03-28 00:00:00
Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5498-1)
2022-06-30 00:00:00
osv
osv
CVE-2022-1796
2022-05-19 16:15:00
vim vulnerabilities
2022-06-30 14:54:40
Moderate: vim security update
2022-08-09 00:00:00
ibm
ibm
ubuntu
ubuntu
Vim vulnerabilities
2022-06-30 00:00:00
Vim vulnerabilities
2023-04-04 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5498-1)
2022-08-26 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2263)
2022-08-18 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2250)
2022-08-18 00:00:00
almalinux
almalinux
Moderate: vim security update
2022-08-03 00:00:00
Moderate: vim security update
2022-08-09 00:00:00
rocky
rocky
vim security update
2022-08-02 06:59:03
vim security update
2022-08-09 09:32:59
redhat
redhat
(RHSA-2022:5942) Moderate: vim security update
2022-08-09 09:32:59
(RHSA-2022:5813) Moderate: vim security update
2022-08-02 06:59:03
oraclelinux
oraclelinux
vim security update
2022-08-10 00:00:00
vim security update
2022-08-05 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0404
2022-06-12 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0199
2022-06-17 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0404
2022-06-12 00:00:00
redos
redos
ROS-20220525-01
2022-05-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2215
2023-08-15 09:26:16
cloudfoundry
cloudfoundry
USN-5995-1: Vim vulnerabilities | Cloud Foundry
2023-04-24 00:00:00
debian
debian
[SECURITY] [DLA 3204-1] vim security update
2022-11-24 09:17:54
amazon
amazon
Medium: vim
2022-07-19 01:26:00
Medium: vim
2022-07-28 20:41:00
suse
suse
Security update for vim (important)
2022-06-16 00:00:00
gentoo
gentoo
Vim, gVim: Multiple Vulnerabilities
2023-05-03 00:00:00
Vim, gVim: Multiple Vulnerabilities
2022-08-21 00:00:00
avleonov
avleonov
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.3%
Related for CLSA-2022:1654529495