PT-2022-1724 · Vim+5 · Vim+5

Published 2022-01-10 · Updated 2024-06-15 · CVE-2022-0156

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions vim (affected versions not specified)

Description The issue is related to a Use After Free condition, which may allow an attacker to impact the availability of information. There is no information about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-1087

ALT-PU-2022-1711

ALT-PU-2022-1731

ALT-PU-2022-1771

AZL-7162

BDU:2022-00979

CVE-2022-0156

MGASA-2022-0023

OPENSUSE-SU-2024:11737-1

USN-6195-1

Affected Products

Alt Linux

Debian

Linuxmint

Apple Macos

Ubuntu

Vim

References · 49

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0156.json · Exploit
• 🔥 https://huntr.dev/bounties/47dded34-3767-4725-8c7c-9dcb68c70b36 · Exploit
• https://github.com/vim/vim/commit/9f1a39a5d1cd7989ada2d1cb32f97d84360e050f · Patch
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11737-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0128 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0156 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0023 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6195-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6195-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-0156 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0156 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM · Vendor Advisory
• https://osv.dev/vulnerability/AZL-7162 · Vendor Advisory