PT-2022-2726 · Vim+5 · Vim+5

Brammool · Published 2022-05-17 · Updated 2024-06-15 · CVE-2022-1769

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4974

Description The issue is related to a buffer over-read in the Vim text editor, specifically in the get one sourceline() function, which can allow a remote attacker to access confidential information by exploiting the vulnerability.

Recommendations For versions prior to 8.2.4974, update to version 8.2.4974 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.

Exploit

Fix

Out of bounds Read

Buffer Over-read

Weakness Enumeration

CWE-125

CWE-126

Related Identifiers

ALT-PU-2022-1948

ALT-PU-2022-1958

ALT-PU-2022-1977

ALT-PU-2022-1987

AZL-9788

BDU:2022-03230

CVE-2022-1769

MGASA-2022-0203

OPENSUSE-SU-2024:12337-1

Affected Products

Alt Linux

Astra Linux

Debian

Apple Macos

Red Os

Vim

References · 137

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1769.json · Exploit
• https://github.com/vim/vim/commit/4748c4bd64610cf943a431d215bb1aad51f8d0b4 · Patch
• https://advisories.mageia.org/MGASA-2022-0203.html · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP · Vendor Advisory
• https://osv.dev/vulnerability/AZL-9788 · Vendor Advisory
• https://debian.org/lts/security/2022/dla-3011 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-1769 · Vendor Advisory
• https://security.gentoo.org/glsa/202208-32 · Vendor Advisory