CVE-2022-1381
Summary
| CVE | CVE-2022-1381 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-04-18 01:15:00 UTC |
|---|
| Updated | 2023-11-07 03:41:00 UTC |
|---|
| Description | global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 35 Update: vim-8.2.4804-1.fc35 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 34 Update: vim-8.2.4804-1.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| Full Disclosure: APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 |
FULLDISC |
seclists.org |
|
| [SECURITY] Fedora 35 Update: vim-8.2.4804-1.fc35 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| Vim, gVim: Multiple Vulnerabilities (GLSA 202208-32) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| About the security content of macOS Ventura 13 - Apple Support |
CONFIRM |
support.apple.com |
|
| Vim, gVim: Multiple Vulnerabilities (GLSA 202305-16) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| [SECURITY] Fedora 34 Update: vim-8.2.4804-1.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| patch 8.2.4763: using invalid pointer with "V:" in Ex mode · vim/vim@f50808e · GitHub |
MISC |
github.com |
|
| huntr – Security Bounties for any GitHub repository |
CONFIRM |
huntr.dev |
|
| Full Disclosure: APPLE-SA-2022-10-24-2 macOS Ventura 13 |
FULLDISC |
seclists.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 182692 Debian Security Update for vim (CVE-2022-1381)
- 282603 Fedora Security Update for vim (FEDORA-2022-e304fffd34)
- 282628 Fedora Security Update for vim (FEDORA-2022-b605768c94)
- 296082 Oracle Solaris 11.4 Support Repository Update (SRU) 48.126.1 Missing (CPUJUL2022)
- 353944 Amazon Linux Security Advisory for vim : ALAS2-2022-1805
- 353954 Amazon Linux Security Advisory for vim : ALAS-2022-1597
- 354452 Amazon Linux Security Advisory for vim : ALAS2022-2022-077
- 354497 Amazon Linux Security Advisory for vim : ALAS2022-2022-155
- 354585 Amazon Linux Security Advisory for vim : ALAS-2022-155
- 355135 Amazon Linux Security Advisory for vim : ALAS2023-2023-098
- 500733 Alpine Linux Security Update for vim
- 504508 Alpine Linux Security Update for vim
- 710607 Gentoo Linux Vim, gVim Multiple Vulnerabilities (GLSA 202208-32)
- 710718 Gentoo Linux Vim, gVim Multiple Vulnerabilities (GLSA 202305-16)
- 752246 SUSE Enterprise Linux Security Update for vim (SUSE-SU-2022:2102-1)
- 753066 SUSE Enterprise Linux Security Update for vim (SUSE-SU-2022:4619-1)
- 900852 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (9489)
- 901341 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (9489-1)
- 901971 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (9487)
- 902082 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (9487-1)
