Lucene search
Veracode Vulnerability DatabaseVERACODE:37508HistoryOct 11, 2022 - 1:15 p.m.
Stack Buffer Overflow
2022-10-1113:15:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
vim
stack buffer overflow
ex_eval.c
arbitrary code execution
vulnerability
EPSS
0.001
Percentile
48.3%
vim/vim is vulnerable to stack buffer overflow. The vulnerability exists in ex_finally function of ex_eval.c which allows an attacker to execute arbitrary codes into the system.
References
github.com/vim/vim/commit/96b9bf8f74af8abf1e30054f996708db7dc285be
huntr.dev/bounties/958866b8-526a-4979-9471-39392e0c9077
lists.fedoraproject.org/archives/list/[email protected]/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/
lists.fedoraproject.org/archives/list/[email protected]/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/
lists.fedoraproject.org/archives/list/[email protected]/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/
security-tracker.debian.org/tracker/CVE-2022-3296
security.gentoo.org/glsa/202305-16
Related
ubuntucve
ubuntucve
CVE-2022-3296
2022-09-25 00:00:00
prion
prion
Stack overflow
2022-09-25 17:15:00
nessus
nessus
Slackware Linux 15.0 / current vim Vulnerability (SSA:2022-269-02)
2022-09-26 00:00:00
CBL Mariner 2.0 Security Update: vim (CVE-2022-3296)
2023-03-28 00:00:00
EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1116)
2023-01-06 00:00:00
nvd
nvd
CVE-2022-3296
2022-09-25 17:15:09
openvas
openvas
Slackware: Security Advisory (SSA:2022-269-02)
2022-09-27 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1116)
2023-01-09 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1140)
2023-01-09 00:00:00
alpinelinux
alpinelinux
CVE-2022-3296
2022-09-25 17:15:09
cbl_mariner
cbl_mariner
CVE-2022-3296 affecting package vim for versions less than 9.0.0614-1
2022-10-17 22:54:40
CVE-2022-3296 affecting package vim 9.0.0404-1
2022-10-13 00:40:15
huntr
huntr
Stack-based Buffer Overflow in function ex_finally
2022-09-22 15:58:17
cve
cve
CVE-2022-3296
2022-09-25 17:15:09
cvelist
cvelist
CVE-2022-3296 Stack-based Buffer Overflow in vim/vim
2022-09-25 00:00:00
debiancve
debiancve
CVE-2022-3296
2022-09-25 17:15:09
slackware
slackware
[slackware-security] vim
2022-09-26 19:50:40
redhatcve
redhatcve
CVE-2022-3296
2022-09-26 12:18:55
cloudlinux
cloudlinux
Fixed CVEs in vim: CVE-2022-3296, CVE-2022-3324
2022-10-13 16:56:52
redos
redos
ROS-20221004-01
2022-10-04 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35
2022-10-17 11:34:07
[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36
2022-10-14 13:03:30
[SECURITY] Fedora 37 Update: vim-9.0.828-1.fc37
2022-11-10 22:58:15
amazon
amazon
Important: vim
2023-03-02 22:35:00
ibm
ibm
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0380
2023-04-25 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0568
2023-04-19 00:00:00
mageia
mageia
Updated vim packages fix security vulnerability
2022-11-19 01:50:51
gentoo
gentoo
Vim, gVim: Multiple Vulnerabilities
2023-05-03 00:00:00