CVE-2022-1629

Katalog CVE

CVSS 7.8 · High EPSS 1,9%

Kerentanan Buffer Over-read pada vim, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution

Rincian

Terbit di NVD

10 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-126: Buffer Over-read
CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vim/vim/commit/53a70289c2712808e6d4e88927e03cac01b470dd patch · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/28 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/41 mailing list · advisory pihak ketiga
• https://huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee exploit · advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-32 advisory pihak ketiga
• https://security.gentoo.org/glsa/202305-16 advisory pihak ketiga
• https://support.apple.com/kb/HT213488 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF...