CVE-2022-0156

Katalog CVE

CVSS 5.5 · Medium EPSS 1,7%

Kerentanan Use After Free pada vim, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

vim is vulnerable to Use After Free

Rincian

Terbit di NVD

10 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vim/vim/commit/9f1a39a5d1cd7989ada2d1cb32f97d84360e050f patch · advisory pihak ketiga
• https://huntr.dev/bounties/47dded34-3767-4725-8c7c-9dcb68c70b36 exploit · patch · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Jul/13 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Mar/29 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2022/01/15/1 mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-32 advisory pihak ketiga
• https://support.apple.com/kb/HT213183 release notes · advisory pihak ketiga
• https://support.apple.com/kb/HT213344 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WM...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD5S2FC2HF22A...