Use After Free

🗓️ 07 Apr 2022 20:00:45Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

vim vulnerable to use after free in utf_ptr2cha

Reporter	Title	Published	Views	Family All 173
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	28 Oct 202219:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Cloud Pak for Watson AIOPs	3 Oct 202218:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	25 Oct 202215:02	–	ibm
Huntr	Use after free in utf_ptr2char	28 Mar 202210:45	–	huntr
ATTACKERKB	CVE-2022-1154	30 Mar 202212:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-077)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus

Vulners

Node

vim vimMatch2:8.2.1913-1+b2debian

AND

vim vimMatch2:8.2.2434-3debian

AND

debian debian_linuxMatch999

vim vimMatch8.2.3500-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.3650-r0os

AND

vim vimMatch8.2.4173-r0os

AND

alpinelinux alpine_linuxMatch3.15

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.4542-r1os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.3779-r0os

AND

vim vimMatch8.2.2822-r1os

AND

vim vimMatch8.2.4350-r0os

AND

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.3156-r0os

AND

vim vimMatch8.2.0-r0os

AND

vim vimMatch8.2.3500-r0os

AND

vim vimMatch8.2.2800-r0os

AND

vim vimMatch8.2.3275-r0os

AND

vim vimMatch8.2.0357-r0os

AND

vim vimMatch8.2.2968-r0os

AND

vim vimMatch8.2.2559-r0os

AND

vim vimMatch8.2.3082-r0os

AND

vim vimMatch8.2.3650-r0os

AND

vim vimMatch8.2.3779-r1os

AND

vim vimMatch8.2.4542-r0os

AND

vim vimMatch8.2.2677-r1os

AND

vim vimMatch8.2.3300-r0os

AND

vim vimMatch8.2.2677-r0os

AND

vim vimMatch8.2.4173-r0os

AND

alpinelinux alpine_linuxMatchedge

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch8.2.4619-r0os

AND

alpinelinux alpine_linuxMatch3.12

vim vimMatch8.2.4173-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.2320-r0os

AND

vim vimMatch8.2.4619-r0os

AND

alpinelinux alpine_linuxMatch3.13

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.4173-r0os

AND

alpinelinux alpine_linuxMatch3.14

vim vimMatch2:8.0.0197-4+deb9u3debian

AND

debian debian_linuxMatch9

vim vimMatch7.4.160_1.el7_3.1

vim vimMatch7.4.160_4.el7

vim vimMatch7.4.629_7.el7

vim vimMatch7.4.629_5.el6_10.2

vim vimMatch7.4.160_6.el7_6

vim vimMatch7.2.411_1.6.el6

vim vimMatch7.4.160_2.el7

vim vimMatch7.2.411_1.8.el6

vim vimMatch7.4.629_5.el6

vim vimMatch7.2.411_1.4.el6

vim vimMatch7.4.160_5.el7

vim vimMatch7.4.629_5.el6_8.1

vim vimMatch7.4.629_6.el7

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/05/msg00022.html
lists	www.lists.debian.org/debian-lts-announce/2022/11/msg00009.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-1154
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/
security	www.security.gentoo.org/glsa/202208-32
security	www.security.gentoo.org/glsa/202305-16
github	www.github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5

07 Nov 2023 22:28Current

1.9Low risk

Vulners AI Score1.9

CVSS 37.8

CVSS 26.8

EPSS0.01144