PT-2022-2266 · Vim+7 · Vim+7

Brammool · Published 2022-02-23 · Updated 2024-06-15 · CVE-2022-0729

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2.4440

Description The issue is caused by the use of an out-of-range pointer offset in the vim text editor. This can be exploited by a remote attacker to execute arbitrary code. The estimated number of potentially affected devices is not specified.

Recommendations For versions prior to 8.2.4440, update to version 8.2.4440 or later to resolve the issue. As a temporary workaround, consider restricting access to the vim editor until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-823

CWE-119

Related Identifiers

ALT-PU-2022-1693

ALT-PU-2022-1711

ALT-PU-2022-1731

ALT-PU-2022-1771

AZL-8765

BDU:2022-02375

CVE-2022-0729

DLA-2947-1

DLA-3182-1

MGASA-2022-0203

OESA-2022-1573

OPENSUSE-SU-2024:12337-1

USN-5460-1

USN-6026-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Apple Macos

Red Os

Ubuntu

Vim

References · 181

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0729.json · Exploit
• 🔥 https://huntr.dev/bounties/f3f3d992-7bd6-4ee5-a502-ae0e5f8016ea · Exploit
• https://github.com/vim/vim/commit/6456fae9ba8e72c74b2c0c499eaf09974604ff30 · Patch
• https://safe-surf.ru/specialists/bulletins-nkcki/691833 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0729 · Security Note
• https://ubuntu.com/security/CVE-2022-1619 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02375 · Security Note
• https://ubuntu.com/security/CVE-2022-0261 · Vendor Advisory
• https://debian.org/lts/security/2022/dla-3011 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0729 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-0729 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI · Vendor Advisory