Heap-based Buffer Overflow

🗓️ 23 Jan 2022 17:15:19Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

vim heap-based buffer overflow vulnerability in 'one_function_arg' functio

Reporter	Title	Published	Views	Family All 77
Huntr	None in vim/vim	7 Jan 202211:01	–	huntr
ATTACKERKB	CVE-2022-0156	10 Jan 202216:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-014)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim (ALAS-2022-1751)	21 Feb 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2022-1567)	19 Feb 202200:00	–	nessus
Tenable Nessus	GLSA-202208-32 : Vim, gVim: Multiple Vulnerabilities	21 Aug 202200:00	–	nessus
Tenable Nessus	macOS 12.x < 12.3 (HT213183)	21 Mar 202200:00	–	nessus
Tenable Nessus	macOS 11.x < 11.6.8 (HT213344)	19 Aug 202200:00	–	nessus

Vulners

Node

vim vimMatch8.2.2800-r0os

AND

vim vimMatch8.2.3082-r0os

AND

vim vimMatch8.2.3300-r0os

AND

vim vimMatch8.2.3156-r0os

AND

vim vimMatch8.2.2559-r0os

AND

vim vimMatch8.2.2677-r0os

AND

vim vimMatch8.2.0357-r0os

AND

vim vimMatch8.2.3779-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.2968-r0os

AND

vim vimMatch8.2.2677-r1os

AND

vim vimMatch8.2.3500-r0os

AND

vim vimMatch8.2.3275-r0os

AND

vim vimMatch8.2.3650-r0os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.0-r0os

AND

vim vimMatch8.2.3779-r1os

AND

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.2822-r1os

AND

alpinelinux alpine_linuxMatchedge

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.3650-r0os

AND

vim vimMatch8.2.3500-r0os

AND

alpinelinux alpine_linuxMatch3.15

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.3437-r0os

AND

alpinelinux alpine_linuxMatch3.12

vim vimMatch8.2.2320-r0os

AND

vim vimMatch8.2.3437-r0os

AND

alpinelinux alpine_linuxMatch3.13

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.3437-r0os

AND

alpinelinux alpine_linuxMatch3.14

vim vimMatch2:8.2.2434-3debian

AND

vim vimMatch2:8.2.1913-1+b2debian

AND

debian debian_linuxMatch999

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Mar/29
seclists	www.seclists.org/fulldisclosure/2022/Jul/13
secdb	www.secdb.alpinelinux.org/edge/main.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/
security	www.security.gentoo.org/glsa/202208-32
github	www.github.com/vim/vim/commit/9f1a39a5d1cd7989ada2d1cb32f97d84360e050f
huntr	www.huntr.dev/bounties/47dded34-3767-4725-8c7c-9dcb68c70b36

07 Nov 2023 22:42Current

3.7Low risk

Vulners AI Score3.7

CVSS 35.5 - 6.8

CVSS 24.3

EPSS0.00219