CVE-2022-3134

Опубликовано: 06 сент. 2022

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Use After Free in GitHub repository vim/vim prior to 9.0.0389.

Ссылки

https://github.com/vim/vim/commit/ccfde4d028e891a41e3548323c3d47b06fb0b83e
Patch
Third Party Advisory
https://huntr.dev/bounties/6ec79e49-c7ab-4cd6-a517-e7934c2eb9dc
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202305-16
Third Party Advisory
https://github.com/vim/vim/commit/ccfde4d028e891a41e3548323c3d47b06fb0b83e
Patch
Third Party Advisory
https://huntr.dev/bounties/6ec79e49-c7ab-4cd6-a517-e7934c2eb9dc
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html
https://security.gentoo.org/glsa/202305-16
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*

Версия до 9.0.0389 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00561

Низкий

7.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2022-3134

CVSS3: 7.8

ubuntu

около 4 лет назад

Use After Free in GitHub repository vim/vim prior to 9.0.0389.

CVE-2022-3134

CVSS3: 7.8

redhat

около 4 лет назад

Use After Free in GitHub repository vim/vim prior to 9.0.0389.

CVE-2022-3134

CVSS3: 7.8

msrc

около 4 лет назад

Use After Free in vim/vim

CVE-2022-3134

CVSS3: 7.8

debian

около 4 лет назад

Use After Free in GitHub repository vim/vim prior to 9.0.0389.

GHSA-r737-66q7-488x

CVSS3: 7.8

github

около 4 лет назад

Use After Free in GitHub repository vim/vim prior to 9.0.0388.

EPSS

Процентиль: 45%

0.00561

Низкий

7.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-416