Out-of-bounds Read

🗓️ 20 May 2022 08:42:46Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 25 Views

vim:edge vulnerability-find_next_quote functio

Reporter	Title	Published	Views	Family All 138
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2022-1629	3 Nov 202218:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	27 Feb 202317:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow in Vim (CVE-2022-1629)	12 Jan 202321:59	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package vim version 4:8.2.5019-alt1	31 May 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package vim version 4:8.2.5019-alt1	2 Jun 202200:00	–	altlinux
Huntr	Buffer Over-read in function utf_ptr2char	22 May 202203:06	–	huntr
Huntr	Buffer Over-read in function find_next_quote	8 May 202204:01	–	huntr
ATTACKERKB	CVE-2022-1629	10 May 202214:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-116)	6 Sep 202200:00	–	nessus

Vulners

Node

AND

vim vimMatch8.2.3500-r0os

vim vimMatch8.2.4708-r0os

vim vimMatch8.2.4542-r0os

vim vimMatch8.2.2559-r0os

vim vimMatch8.2.2852-r0os

vim vimMatch8.2.0-r0os

vim vimMatch8.2.0357-r0os

vim vimMatch8.2.4350-r0os

vim vimMatch8.2.4542-r1os

vim vimMatch8.2.3082-r0os

vim vimMatch8.2.3300-r0os

vim vimMatch8.2.4836-r0os

vim vimMatch8.2.3275-r0os

vim vimMatch8.2.3779-r0os

vim vimMatch8.2.3156-r0os

vim vimMatch8.2.3437-r0os

vim vimMatch8.2.4173-r0os

vim vimMatch8.2.2956-r0os

vim vimMatch8.2.2968-r0os

vim vimMatch8.2.3779-r1os

vim vimMatch8.2.3567-r0os

vim vimMatch8.2.2677-r0os

vim vimMatch8.2.3650-r0os

vim vimMatch8.2.2800-r0os

vim vimMatch8.2.2677-r1os

vim vimMatch8.2.4619-r0os

vim vimMatch8.2.2822-r1os

vim vimMatch8.2.0735-r0os

alpinelinux alpine_linuxMatchedge

AND

vim vimMatch8.2.4836-r0os

vim vimMatch8.2.4708-r0os

alpinelinux alpine_linuxMatch3.16

AND

vim vimMatch2:8.2.2434-3debian

vim vimMatch2:8.2.1913-1+b2debian

debian debian_linuxMatch999

vim vimMatch7.4.160_6.el7_6

vim vimMatch7.4.629_5.el6_8.1

vim vimMatch7.2.411_1.8.el6

vim vimMatch7.4.629_6.el7

vim vimMatch7.4.160_4.el7

vim vimMatch7.4.160_2.el7

vim vimMatch7.2.411_1.4.el6

vim vimMatch7.4.629_5.el6_10.2

vim vimMatch7.4.629_5.el6

vim vimMatch7.2.411_1.6.el6

vim vimMatch7.4.160_5.el7

vim vimMatch7.4.160_1.el7_3.1

vim vimMatch7.4.629_7.el7

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Oct/28
seclists	www.seclists.org/fulldisclosure/2022/Oct/41
secdb	www.secdb.alpinelinux.org/edge/main.yaml
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/
security	www.security.gentoo.org/glsa/202208-32
security	www.security.gentoo.org/glsa/202305-16
github	www.github.com/vim/vim/commit/53a70289c2712808e6d4e88927e03cac01b470dd
huntr	www.huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee
support	www.support.apple.com/kb/HT213488

07 Nov 2023 22:17Current

7.7High risk

Vulners AI Score7.7

CVSS 36.6 - 7.8

CVSS 26.8

EPSS0.01927