Buffer Overflow

🗓️ 26 Apr 2022 11:54:34Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 38 Views

vim vulnerable to denial of service due to global heap buffer overflow in skip_rang

Reporter	Title	Published	Views	Family All 82
Huntr	global heap buffer overflow in skip_range	13 Apr 202220:59	–	huntr
ATTACKERKB	CVE-2022-1381	18 Apr 202201:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-077)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim, --advisory ALAS2-2022-1805 (ALAS-2022-1805)	7 Jun 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2022-1597)	10 Jun 202200:00	–	nessus
Tenable Nessus	Fedora 35 : vim (2022-e304fffd34)	23 Apr 202200:00	–	nessus
Tenable Nessus	GLSA-202208-32 : Vim, gVim: Multiple Vulnerabilities	21 Aug 202200:00	–	nessus
Tenable Nessus	GLSA-202305-16 : Vim, gVim: Multiple Vulnerabilities	3 May 202300:00	–	nessus

Vulners

Node

vim vimMatch2:8.2.2434-3debian

AND

vim vimMatch2:8.2.1913-1+b2debian

AND

debian debian_linuxMatch999

vim vimMatch8.2.4708-r0os

AND

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.3500-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch8.2.3650-r0os

AND

alpinelinux alpine_linuxMatch3.15

vim vimMatch8.2.3082-r0os

AND

vim vimMatch8.2.3275-r0os

AND

vim vimMatch8.2.3779-r0os

AND

vim vimMatch8.2.2800-r0os

AND

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.2677-r1os

AND

vim vimMatch8.2.4542-r0os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.4542-r1os

AND

vim vimMatch8.2.3300-r0os

AND

vim vimMatch8.2.3567-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.0735-r0os

AND

vim vimMatch8.2.2559-r0os

AND

vim vimMatch8.2.0-r0os

AND

vim vimMatch8.2.4708-r0os

AND

vim vimMatch8.2.4350-r0os

AND

vim vimMatch8.2.3500-r0os

AND

vim vimMatch8.2.3650-r0os

AND

vim vimMatch8.2.2968-r0os

AND

vim vimMatch8.2.2677-r0os

AND

vim vimMatch8.2.3156-r0os

AND

vim vimMatch8.2.3779-r1os

AND

vim vimMatch8.2.0357-r0os

AND

vim vimMatch8.2.2822-r1os

AND

alpinelinux alpine_linuxMatchedge

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.4708-r0os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch8.2.0735-r0os

AND

alpinelinux alpine_linuxMatch3.12

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.4708-r0os

AND

vim vimMatch8.2.2320-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.4173-r0os

AND

alpinelinux alpine_linuxMatch3.13

vim vimMatch8.2.4619-r0os

AND

vim vimMatch8.2.2852-r0os

AND

vim vimMatch8.2.4173-r0os

AND

vim vimMatch8.2.2956-r0os

AND

vim vimMatch8.2.3437-r0os

AND

vim vimMatch8.2.4708-r0os

AND

alpinelinux alpine_linuxMatch3.14

vim vimMatch8.2.4708-r0os

AND

alpinelinux alpine_linuxMatch3.16

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Oct/28
seclists	www.seclists.org/fulldisclosure/2022/Oct/41
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-1381
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/
security	www.security.gentoo.org/glsa/202208-32
security	www.security.gentoo.org/glsa/202305-16
github	www.github.com/vim/vim/commit/f50808ed135ab973296bca515ae4029b321afe47

07 Nov 2023 22:19Current

3.2Low risk

Vulners AI Score3.2

CVSS 37.8

CVSS 26.8

EPSS0.01197