PT-2022-1928 · Vim+9 · Vim+9

Brammool · Published 2022-03-13 · Updated 2024-06-15 · CVE-2022-0943

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2.4563

Description A Heap-based Buffer Overflow issue occurs in the vim text editor. This issue can allow an attacker to execute arbitrary code.

Recommendations For versions prior to 8.2.4563, update to version 8.2.4563 or later to resolve the issue.

Exploit

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

ALSA-2022:5242

ALT-PU-2022-1693

ALT-PU-2022-1711

ALT-PU-2022-1731

ALT-PU-2022-1771

AZL-9069

BDU:2022-01466

CVE-2022-0943

DLA-3053-1

DLA-3182-1

MGASA-2022-0203

OESA-2022-1608

OPENSUSE-SU-2024:12337-1

RHSA-2022:5242

RHSA-2022_5242

USN-5460-1

USN-5613-1

USN-5613-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Debian

Linuxmint

Apple Macos

Red Hat

Red Os

Ubuntu

Vim

References · 183

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0943.json · Exploit
• 🔥 https://huntr.dev/bounties/9e4de32f-ad5f-4830-b3ae-9467b5ab90a1 · Exploit
• https://github.com/vim/vim/commit/5c68617d395f9d7b824f68475b24ce3e38d653a3 · Patch
• https://osv.dev/vulnerability/CVE-2022-0943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1619 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01466 · Security Note
• https://debian.org/lts/security/2022/dla-3011 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:5242 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI · Vendor Advisory
• https://osv.dev/vulnerability/AZL-9069 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3053-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202208-32 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-0943 · Vendor Advisory