PT-2022-3438 · Vim+7 · Vim+7

Brammool

·

Published

2022-06-23

·

Updated

2024-06-15

·

CVE-2022-2182

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2
Description The issue is related to a heap-based buffer overflow in the parse cmd address() function of the Vim text editor. This can be exploited by a remote attacker to execute arbitrary code.
Recommendations For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the parse cmd address() function in the ex docmd.c file until a patch is available.

Exploit

Fix

Heap Based Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-122

Related Identifiers

ALT-PU-2022-2150
ALT-PU-2022-2272
ALT-PU-2022-2420
ALT-PU-2022-2430
AZL-9969
BDU:2022-04216
CVE-2022-2182
MGASA-2022-0430
OPENSUSE-SU-2022_3229-1
OPENSUSE-SU-2024:12337-1
SUSE-SU-2022:3229-1
SUSE-SU-2022:4619-1
USN-6270-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Red Os
Suse
Ubuntu
Vim