Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-3705

Опубликовано: 26 окт. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5

Описание

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

2:9.0.1672-1ubuntu2
esm-infra-legacy/trusty

ignored

changes too intrusive
esm-infra/bionic

ignored

changes too intrusive
esm-infra/focal

not-affected

2:8.1.2269-1ubuntu5.18
esm-infra/xenial

ignored

changes too intrusive
focal

released

2:8.1.2269-1ubuntu5.18
jammy

released

2:8.2.3995-1ubuntu2.12
kinetic

ignored

end of life, was needs-triage
lunar

not-affected

2:9.0.1000-4ubuntu3.1

Показывать по

EPSS

Процентиль: 40%
0.00182
Низкий

5 Medium

CVSS3

Связанные уязвимости

CVSS3: 7
redhat
больше 2 лет назад

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.

CVSS3: 5
nvd
больше 2 лет назад

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.

CVSS3: 7.5
msrc
больше 2 лет назад

Описание отсутствует

CVSS3: 5
debian
больше 2 лет назад

A vulnerability was found in vim and classified as problematic. Affect ...

CVSS3: 7.5
redos
больше 2 лет назад

Уязвимость VIM

EPSS

Процентиль: 40%
0.00182
Низкий

5 Medium

CVSS3