7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
29.4%
vim is vulnerable to Heap-based Buffer Overflow
CPE | Name | Operator | Version |
---|---|---|---|
vim | eq | 8.2.2303-r2 | |
vim | eq | 7.4-r3 | |
vim | eq | 8.2.0-r0 | |
vim | eq | 8.0.1137-r0 | |
vim | eq | 8.0.0187-r0 | |
vim | eq | 7.3.515-r0 | |
vim | eq | 8.2.3082-r0 | |
vim | eq | 7.4-r1 | |
vim | eq | 7.3.401-r0 | |
vim | eq | 8.0.0460-r0 |
www.openwall.com/lists/oss-security/2021/10/01/1
github.com/vim/vim/commit/b7081e135a16091c93f6f5f7525a5c58fb7ca9f9
huntr.dev/bounties/016ad2f2-07c1-4d14-a8ce-6eed10729365
lists.fedoraproject.org/archives/list/[email protected]/message/J2CJLY3CF55I2ULG2X4ENXLSXAXYW5J4/
lists.fedoraproject.org/archives/list/[email protected]/message/X4FFQARG3LGREPDZRI4C7ERQL3RJKEWQ/
lists.fedoraproject.org/archives/list/[email protected]/message/ZFNTMVZCN4TRTTCAXRLVQ7H2P7FYAIZQ/
security.gentoo.org/glsa/202208-32
security.netapp.com/advisory/ntap-20221124-0003/
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
29.4%