Lucene search
Redhat.comRH:CVE-2022-3297HistorySep 26, 2022 - 12:19 p.m.
CVE-2022-3297
2022-09-2612:19:23
redhat.com
access.redhat.com
13
0.001 Low
EPSS
Percentile
46.7%
A heap use-after-free vulnerability was found in Vim’s process_next_cpt_value() function of the src/insexpand.c file. This flaw occurs due to the usage of freed memory when ‘tagfunc’ wipes out the buffer that holds ‘complete.’ This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free issue that causes an application to crash, possibly executing code and corrupting memory.
Mitigation
Untrusted vim scripts with -s [scriptin] are not recommended to run.
Related
cvelist
cvelist
CVE-2022-3297 Use After Free in vim/vim
2022-09-25 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: vim (CVE-2022-3297)
2023-03-28 00:00:00
EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1116)
2023-01-06 00:00:00
EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1140)
2023-01-06 00:00:00
huntr
huntr
Use After Free in function process_next_cpt_value
2022-09-22 00:41:27
cbl_mariner
cbl_mariner
CVE-2022-3297 affecting package vim for versions less than 9.0.0614-1
2022-10-17 22:54:40
CVE-2022-3297 affecting package vim 9.0.0404-1
2022-10-13 00:40:15
veracode
veracode
Use After Free
2022-10-11 13:15:53
alpinelinux
alpinelinux
CVE-2022-3297
2022-09-25 19:15:00
debiancve
debiancve
CVE-2022-3297
2022-09-25 19:15:00
prion
prion
Design/Logic Flaw
2022-09-25 19:15:00
cve
cve
CVE-2022-3297
2022-09-25 19:15:00
cnvd
cnvd
Vim Resource Management Error Vulnerability (CNVD-2022-68077)
2022-09-27 00:00:00
ubuntucve
ubuntucve
CVE-2022-3297
2022-09-25 00:00:00
redos
redos
ROS-20221004-01
2022-10-04 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1116)
2023-01-09 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1140)
2023-01-09 00:00:00
Fedora: Security Advisory for vim (FEDORA-2022-40161673a3)
2022-10-15 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35
2022-10-17 11:34:07
[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36
2022-10-14 13:03:30
[SECURITY] Fedora 37 Update: vim-9.0.828-1.fc37
2022-11-10 22:58:15
osv
osv
vim vulnerabilities
2023-10-09 04:10:20
ubuntu
ubuntu
Vim vulnerabilities
2023-10-09 00:00:00
cloudfoundry
cloudfoundry
USN-6420-1: Vim vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
ibm
ibm
amazon
amazon
Important: vim
2023-03-02 22:35:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0380
2023-04-25 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0568
2023-04-19 00:00:00
mageia
mageia
Updated vim packages fix security vulnerability
2022-11-19 01:50:51
gentoo
gentoo
Vim, gVim: Multiple Vulnerabilities
2023-05-03 00:00:00
avleonov
avleonov