Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-3235

Опубликовано: 18 сент. 2022
Источник: redhat
CVSS3: 7.8

Описание

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

Отчет

Red Hat Product Security has rated this issue as having a Low security impact, because the "victim" has to run an untrusted file IN SCRIPT MODE. Someone who is running untrusted files in script mode is equivalent to someone just taking a random python script and running it.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6vimOut of support scope
Red Hat Enterprise Linux 7vimOut of support scope
Red Hat Enterprise Linux 8vimFix deferred
Red Hat Enterprise Linux 9vimFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-416

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 3 года назад

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

CVSS3: 7.8
nvd
почти 3 года назад

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

CVSS3: 7.8
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 7.8
debian
почти 3 года назад

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

CVSS3: 7.8
github
почти 3 года назад

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

7.8 High

CVSS3