CVE-2022-0318

Published: Jan 21, 2022

Modified: Nov 15, 2024

PUBLISHED

CVSS v3.0

6.6

MEDIUM

Description

Heap-based Buffer Overflow in vim/vim prior to 8.2.

Vendor	Product	Versions
vim	vim/vim	affected `unspecified - < 8.2`

Weaknesses (CWE)

CWE-122

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

References

https://huntr.dev/bounties/0d10ba02-b138-4e68-a284-67f781a62d08

https://github.com/vim/vim/commit/57df9e8a9f9ae1aafdde9b86b10ad907627a87dc

GLSA-202208-32

vendor-advisory

https://support.apple.com/kb/HT213444

https://support.apple.com/kb/HT213488

20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13

mailing-list

20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13

mailing-list

20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6

mailing-list

[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-0318

Description

Affected Products

Weaknesses (CWE)

CVSS v3.0 Details

References