CVE-2022-2845

Katalog CVE

CVSS 7.8 · High EPSS 0,53%

Kerentanan Improper Validation of Specified Quantity in Input pada vim, fedoraproject fedora. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.

Rincian

Terbit di NVD

17 Agustus 2022

Terakhir diubah

9 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1284: Improper Validation of Specified Quantity in Input

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vim/vim/commit/e98c88c44c308edaea5994b8ad4363e65030968c patch · advisory pihak ketiga
• https://huntr.dev/bounties/3e1d31ac-1cfd-4a9f-bc5c-213376b69445 exploit · patch · advisory pihak ketiga
• https://security.gentoo.org/glsa/202305-16 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTA...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMB...