Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-2288

Опубликовано: 03 июл. 2022
Источник: redhat
CVSS3: 5.3
EPSS Низкий

Описание

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

Отчет

Red Hat Product Security has rated this issue as having a Low security impact, because the "victim" has to run an untrusted file IN SCRIPT MODE. Someone who is running untrusted files in script mode is equivalent to someone just taking a random python script and running it. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/

Меры по смягчению последствий

Untrusted vim scripts with -s [scriptin] are not recommended to run.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6vimOut of support scope
Red Hat Enterprise Linux 7vimOut of support scope
Red Hat Enterprise Linux 8vimNot affected
Red Hat Enterprise Linux 9vimNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2103878vim: out of bounds write in parse_command_modifiers() at ex_docmd.c

EPSS

Процентиль: 69%
0.01357
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 4 лет назад

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

CVSS3: 7.8
nvd
около 4 лет назад

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

CVSS3: 7.8
msrc
около 4 лет назад

Out-of-bounds Write in vim/vim

CVSS3: 7.8
debian
около 4 лет назад

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

CVSS3: 7.8
github
около 4 лет назад

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

EPSS

Процентиль: 69%
0.01357
Низкий

5.3 Medium

CVSS3

Уязвимость CVE-2022-2288