CVE-2022-1720mediumCWE-126

CVE-2022-1720: falha de média gravidade em vim/vim

Buffer Over-read in function grab_file_name in vim/vim

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar vim/vim+ Monitorar vim

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.6epss 2.2%
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Produtos afetados
vim · vim/vim
CVEs relacionadas — vim/vim

No mesmo produto, das mais perigosas para as menos.

CVE-2022-0572HIGHHeap-based Buffer Overflow in vim/vimEPSS 26.5%CVE-2022-0714HIGHHeap-based Buffer Overflow in vim/vimEPSS 12.7%CVE-2022-1381HIGHglobal heap buffer overflow in skip_range in vim/vimEPSS 3.1%CVE-2022-1616HIGHUse after free in append_command in vim/vimEPSS 2.7%CVE-2022-1619MEDIUMHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimEPSS 2.6%CVE-2022-1621HIGHHeap buffer overflow in vim_strncpy find_word in vim/vimEPSS 2.4%