← Back to CVEs

CVE-2022-0729

HIGH

8.8

Description

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published2/23/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

apple:macosdebian:debian_linuxfedoraproject:fedoravim:vim

Weaknesses (CWE)

CWE-823CWE-119

References

http://seclists.org/fulldisclosure/2022/Oct/28(security@huntr.dev)

http://seclists.org/fulldisclosure/2022/Oct/41(security@huntr.dev)

https://github.com/vim/vim/commit/6456fae9ba8e72c74b2c0c499eaf09974604ff30(security@huntr.dev)

https://huntr.dev/bounties/f3f3d992-7bd6-4ee5-a502-ae0e5f8016ea(security@huntr.dev)

https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html(security@huntr.dev)

https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html(security@huntr.dev)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/(security@huntr.dev)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HBUYQBZ6GWAWJRWP7AODJ4KHW5BCKDVP/(security@huntr.dev)

https://security.gentoo.org/glsa/202208-32(security@huntr.dev)

https://support.apple.com/kb/HT213488(security@huntr.dev)

http://seclists.org/fulldisclosure/2022/Oct/28(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2022/Oct/41(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/vim/vim/commit/6456fae9ba8e72c74b2c0c499eaf09974604ff30(af854a3a-2127-422b-91ae-364da2661108)

https://huntr.dev/bounties/f3f3d992-7bd6-4ee5-a502-ae0e5f8016ea(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HBUYQBZ6GWAWJRWP7AODJ4KHW5BCKDVP/(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202208-32(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT213488(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.