Lucene search

K
redosRedosROS-20220909-01
HistorySep 09, 2022 - 12:00 a.m.

ROS-20220909-01

2022-09-0900:00:00
redos.red-soft.ru
7

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

38.9%

A vulnerability in the vim_vsnprintf_typval() function of the Vim text editor is related to the use of memory after it has been freed. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information

Vim text editor vulnerability is related to NULL pointer dereferencing bug in do_mouse() function in mouse.c. Exploitation of the vulnerability could allow a remote attacker to perform a denial of service (DoS) attack.

A vulnerability in the qf_fill_buffer() function of the Vim text editor is related to memory usage after memory is freed. Exploitation of the vulnerability could allow an attacker to affect the confidentiality, integrity and availability of protected information

A vulnerability in the get_next_valid_entry() function of the Vim text editor is related to memory usage after its release. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information

Vulnerability in sug_filltree() function of Vim text editor is related to reading data outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64vim-x11<= 8.2.4701-8UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

38.9%