CVE-2022-0685 Use of Out-of-range Pointer Offset in vim/vim

🗓️ 20 Feb 2022 00:00:00Reported by @huntrdevType

CVE-2022-0685 Out-of-range Pointer Offset in vi

Reporter	Title	Published	Views	Family All 77
NVD	CVE-2022-0685	20 Feb 202211:15	–	nvd
AlpineLinux	CVE-2022-0685	20 Feb 202211:15	–	alpinelinux
Prion	Design/Logic Flaw	20 Feb 202211:15	–	prion
Veracode	Buffer Overflow	12 Mar 202204:12	–	veracode
UbuntuCve	CVE-2022-0685	20 Feb 202200:00	–	ubuntucve
CNVD	An unspecified vulnerability exists in vim (CNVD-2022-13206)	22 Feb 202200:00	–	cnvd
CBLMariner	CVE-2022-0685 affecting package vim for versions less than 8.2.4743-1	26 Apr 202220:17	–	cbl_mariner
Huntr	Use of Out-of-range Pointer Offset	19 Feb 202205:59	–	huntr
RedhatCVE	CVE-2022-0685	24 Feb 202206:57	–	redhatcve
Debian CVE	CVE-2022-0685	20 Feb 202211:15	–	debiancve

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "8.2.4418",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/kb/HT213488
lists	www.lists.debian.org/debian-lts-announce/2022/11/msg00009.html
github	www.github.com/vim/vim/commit/5921aeb5741fc6e84c870d68c7c35b93ad0c9f87
huntr	www.huntr.dev/bounties/27230da3-9b1a-4d5d-8cdf-4b1e62fcd782
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
security	www.security.gentoo.org/glsa/202208-32
seclists	www.seclists.org/fulldisclosure/2022/Oct/41
seclists	www.seclists.org/fulldisclosure/2022/Oct/28
lists	www.lists.debian.org/debian-lts-announce/2022/03/msg00018.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Feb 2022 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS38.4

EPSS0.001

CWE-823