DeutschShown in its original language — a full translation is planned for a future version.
vim: Mehrere Schwachstellen
view advisory published 2022-05-08
Ein lokaler Angreifer kann mehrere Schwachstellen in vim ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service zu verursachen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-1620US | high7.5 | — | ||
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at… | ||||
| CVE-2022-1619US | high7.8 | — | ||
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and… | ||||
| CVE-2022-1616US | high7.8 | — | ||
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and… | ||||
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS-2022-1829 vom 2022-07-21external
- Amazon Linux Security Advisory ALAS-2022-1628 vom 2022-08-05external
- RedHat Bugzilla vom 2022-05-08external
- RedHat Bugzilla vom 2022-05-08external
- RedHat Bugzilla vom 2022-05-08external
- Debian Security Advisory DLA-3011 vom 2022-05-17external
- Debian Security Advisory DLA-3182 vom 2022-11-08external
- Debian Security Advisory DLA-3204 vom 2022-11-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan