Lucene search

@huntrdevCVELIST:CVE-2022-0696

HistoryFeb 21, 2022 - 12:00 a.m.

CVE-2022-0696 NULL Pointer Dereference in vim/vim

2022-02-2100:00:00

CWE-476

@huntrdev

www.cve.org

cve-2022-0696

null pointer dereference

vim/vim

github

repository

prior to 8.2.4428

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

35.7%

JSON

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "8.2.4428",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2022/Oct/28

seclists.org/fulldisclosure/2022/Oct/41

github.com/vim/vim/commit/0f6e28f686dbb59ab3b562408ab9b2234797b9b1

huntr.dev/bounties/7416c2cb-1809-4834-8989-e84ff033f15f

lists.debian.org/debian-lts-announce/2022/11/msg00032.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/

support.apple.com/kb/HT213488

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

35.7%

JSON

Related for CVELIST:CVE-2022-0696