Buffer Overflow

🗓️ 12 Mar 2022 04:12:04Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 30 Views

vim is vulnerable to buffer overflow due to Out-of-range Pointer Offse

Reporter	Title	Published	Views	Family All 110
Huntr	Use of Out-of-range Pointer Offset	19 Feb 202205:59	–	huntr
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-077)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim (ALAS-2022-1771)	6 Apr 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2022-1579)	6 Apr 202200:00	–	nessus
Tenable Nessus	Debian DLA-2947-1 : vim - LTS security update	16 Mar 202200:00	–	nessus
Tenable Nessus	Debian dla-3182 : vim - security update	10 Nov 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1591)	25 Apr 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1799)	6 Jun 202200:00	–	nessus

Vulners

Node

vim vimMatch8.2.3275-r0os

AND

vim vimMatch8.2.3300-r0os

AND

vim vimMatch8.2.0-r0os

AND

vim vimMatch8.2.2559-r0os

AND

vim vimMatch8.2.3082-r0os

AND

vim vimMatch8.2.3650-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.3500-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.2968-r0os

AND

vim vimMatch8.2.2677-r0os

AND

vim vimMatch8.2.3156-r0os

AND

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.3779-r1os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.0357-r0os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.2822-r1os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch8.2.3779-r0os

AND

vim vimMatch8.2.4350-r0os

AND

vim vimMatch8.2.2677-r1os

AND

vim vimMatch8.2.2800-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

vim vimMatch2:8.0.0197-4+deb9u3debian

AND

debian debian_linuxMatch9

OR

vim vimMatch8.2.3650-r0os

AND

vim vimMatch8.2.3500-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.4173-r0os

AND

alpinelinux alpine_linuxMatch3.15

OR

vim vimMatch2:8.2.2434-3debian

AND

vim vimMatch2:8.2.1913-1+b2debian

AND

debian debian_linuxMatch999

OR

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.4173-r0os

AND

alpinelinux alpine_linuxMatch3.12

OR

vim vimMatch8.2.2320-r0os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch8.2.3437-r0os

AND

alpinelinux alpine_linuxMatch3.13

OR

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.4173-r0os

AND

alpinelinux alpine_linuxMatch3.14

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Oct/28
seclists	www.seclists.org/fulldisclosure/2022/Oct/41
lists	www.lists.debian.org/debian-lts-announce/2022/03/msg00018.html
lists	www.lists.debian.org/debian-lts-announce/2022/11/msg00009.html
secdb	www.secdb.alpinelinux.org/edge/main.yaml
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
security	www.security.gentoo.org/glsa/202208-32
github	www.github.com/vim/vim/commit/5921aeb5741fc6e84c870d68c7c35b93ad0c9f87
huntr	www.huntr.dev/bounties/27230da3-9b1a-4d5d-8cdf-4b1e62fcd782

07 Nov 2023 23:00Current

3.9Low risk

Vulners AI Score3.9

CVSS 37.8 - 8.4

CVSS 26.8

EPSS0.01219

vim buffer overflow out-of-range pointer offset vulnerability software