DeutschShown in its original language — a full translation is planned for a future version.
vim: Mehrere Schwachstellen
view advisory published 2022-01-12
Ein lokaler Angreifer kann mehrere Schwachstellen in vim ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-0158US | low3.3 | — | ||
vim is vulnerable to Heap-based Buffer Overflow | ||||
| CVE-2022-0156US | medium5.5 | — | ||
vim is vulnerable to Use After Free | ||||
| CVE-2021-46059US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.… | ||||
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS-2022-1751 vom 2022-02-21external
- Amazon Linux Security Advisory ALAS-2022-014 vom 2022-01-27external
- Amazon Linux Security Advisory ALAS-2022-1567 vom 2022-02-19external
- Huntr Bug-Bounty vom 2022-01-12external
- Huntr Bug-Bounty vom 2022-01-12external
- Huntr Bug-Bounty vom 2022-01-12external
- SUSE Security Update SUSE-SU-2022:0736-2 vom 2022-04-20external
- SUSE Security Update SUSE-SU-2022:4619-1 vom 2022-12-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan