CVE-2022-2125

Published: Jun 19, 2022

Modified: Aug 3, 2024

PUBLISHED

CVSS v3.0

7.8

HIGH

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Vendor	Product	Versions
vim	vim/vim	affected `unspecified - < 8.2`

Weaknesses (CWE)

CWE-122

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705

https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f

FEDORA-2022-719f3ec21b

vendor-advisory

FEDORA-2022-bb7f3cacbf

vendor-advisory

GLSA-202208-32

vendor-advisory

https://support.apple.com/kb/HT213443

https://support.apple.com/kb/HT213444

https://support.apple.com/kb/HT213488

20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13

mailing-list

20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13

mailing-list

20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6

mailing-list

20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7

mailing-list

GLSA-202305-16

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-2125

Description

Affected Products

Weaknesses (CWE)

CVSS v3.0 Details

References