CVE-2022-2598

Опубликовано: 01 авг. 2022

Источник: nvd

CVSS3: 6.5

CVSS3: 5.5

EPSS Низкий

Описание

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.

Ссылки

https://github.com/vim/vim/commit/4e677b9c40ccbc5f090971b31dc2fe07bf05541d
Patch
Third Party Advisory
https://huntr.dev/bounties/2f08363a-47a2-422d-a7de-ce96a89ad08e
Exploit
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
Mailing List
Third Party Advisory
https://github.com/vim/vim/commit/4e677b9c40ccbc5f090971b31dc2fe07bf05541d
Patch
Third Party Advisory
https://huntr.dev/bounties/2f08363a-47a2-422d-a7de-ce96a89ad08e
Exploit
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*

Версия до 9.0.0100 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00126

Низкий

6.5 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2022-2598

CVSS3: 6.5

ubuntu

больше 3 лет назад

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.

CVE-2022-2598

CVSS3: 5.5

redhat

больше 3 лет назад

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.

CVE-2022-2598

CVSS3: 5.5

msrc

больше 3 лет назад

Out-of-bounds Write to API in vim/vim

CVE-2022-2598

CVSS3: 6.5

debian

больше 3 лет назад

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0 ...

GHSA-v8r4-hc5w-5ww3

CVSS3: 5.5

github

больше 3 лет назад

Undefined Behavior for Input to API in GitHub repository vim/vim prior to 9.0.0100.

EPSS

Процентиль: 32%

0.00126

Низкий

6.5 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-787