PT-2022-17526 · Vim+4 · Vim+4

Brammool · Publicado 2022-08-01 · Atualizado 2024-06-15 · CVE-2022-2580

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H

Nome do software vulnerável e versões afetadas

Versões do vim anteriores à 9.0.0102

Descrição

Foi identificada uma vulnerabilidade de estouro de buffer baseada na pilha.

Recomendações

Para versões anteriores à 9.0.0102, atualize para a versão 9.0.0102 ou posterior para resolver o problema.

Exploit

Correção

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

ALT-PU-2022-2600

ALT-PU-2022-2637

ALT-PU-2022-2659

ALT-PU-2022-3192

AZL-10445

CVE-2022-2580

MGASA-2022-0430

OPENSUSE-SU-2022_3229-1

OPENSUSE-SU-2024:12337-1

SUSE-SU-2022:3229-1

SUSE-SU-2022:4619-1

USN-6302-1

Produtos afetados

Alt Linux

Linuxmint

Suse

Ubuntu

Vim

Referências · 277

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2580.json · Exploit
• 🔥 https://huntr.dev/bounties/c5f2f1d4-0441-4881-b19c-055acaa16249 · Exploit
• https://github.com/vim/vim/commit/1e56bda9048a9625bce6e660938c834c5c15b07d · Correção
• https://bugzilla.suse.com/1201363 · Nota
• https://osv.dev/vulnerability/MGASA-2022-0430 · Aviso do Fabricante
• https://bugzilla.suse.com/1200701 · Nota
• https://suse.com/security/cve/CVE-2017-6350 · Nota
• https://suse.com/support/update/announcement/2022/suse-su-20223229-1 · Nota
• https://suse.com/security/cve/CVE-2022-1621 · Nota
• https://bugzilla.suse.com/1201359 · Nota
• https://bugzilla.suse.com/1195356 · Nota
• https://suse.com/security/cve/CVE-2022-0943 · Nota
• https://suse.com/security/cve/CVE-2022-0629 · Nota
• https://suse.com/security/cve/CVE-2022-2580 · Nota
• https://suse.com/security/cve/CVE-2022-3296 · Nota