PT-2022-2734 · Vim+8 · Vim+8

Brammool · Published 2022-04-28 · Updated 2024-06-15 · CVE-2022-1735

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4969

Description The issue is related to a classic buffer overflow in the Vim text editor, specifically with the implementation of the utfc ptr2len() function, which involves copying a buffer without checking the size of the input data. This can allow an attacker to execute arbitrary code or cause a denial of service by using a specially crafted file. The vulnerability can be exploited by a remote attacker who tricks the victim into opening a specially crafted file, leading to memory corruption and the execution of arbitrary code on the target system.

Recommendations For versions prior to 8.2.4969, update to version 8.2.4969 or later to resolve the issue. As a temporary workaround, consider restricting the use of the utfc ptr2len() function until a patch is available. Avoid opening specially crafted files with the affected versions of Vim to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2022-1948

ALT-PU-2022-1958

ALT-PU-2022-1977

ALT-PU-2022-1987

AZL-9787

BDU:2022-03239

CVE-2022-1735

OESA-2022-1687

OPENSUSE-SU-2022_2102-1

OPENSUSE-SU-2024:12337-1

SUSE-SU-2022:2102-1

SUSE-SU-2022:4619-1

USN-5498-1

USN-5995-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Apple Macos

Red Os

Suse

Ubuntu

Vim

References · 300

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1735.json · Exploit
• 🔥 https://huntr.dev/bounties/c9f85608-ff11-48e4-933d-53d1759d44d9 · Exploit
• https://github.com/vim/vim/commit/7ce5b2b590256ce53d6af28c1d203fb3bc1d2d97 · Patch
• https://ubuntu.com/security/CVE-2022-2946 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2206 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1851 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1735 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-9787 · Vendor Advisory
• https://security.gentoo.org/glsa/202208-32 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1735 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4619-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2571 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1629 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2849 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2124 · Vendor Advisory