CVE-2022-0393

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Affected Products (NVD)
VendorProductVersion
vimvim
𝑥
< 8.2.4233
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
vim
bookworm
2:9.0.1378-2
fixed
bullseye
unimportant
buster
not-affected
sid
2:9.1.0777-1
fixed
stretch
not-affected
trixie
2:9.1.0777-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vim
bionic
not-affected
focal
not-affected
impish
not-affected
jammy
Fixed 2:8.2.3995-1ubuntu2.9
released
kinetic
not-affected
lunar
not-affected
trusty
not-affected
xenial
not-affected
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
vim-X11
Amazon Linux 2
2:8.2.4857-1.amzn2.0.1
fixed
vim-common
Amazon Linux 1
2:8.2.4621-1.1.amzn1
fixed
Amazon Linux 2
2:8.2.4857-1.amzn2.0.1
fixed
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-common-debuginfo
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-data
Amazon Linux 1
2:8.2.4621-1.1.amzn1
fixed
Amazon Linux 2
2:8.2.4857-1.amzn2.0.1
fixed
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-debuginfo
Amazon Linux 1
2:8.2.4621-1.1.amzn1
fixed
Amazon Linux 2
2:8.2.4857-1.amzn2.0.1
fixed
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-debugsource
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-default-editor
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-enhanced
Amazon Linux 1
2:8.2.4621-1.1.amzn1
fixed
Amazon Linux 2
2:8.2.4857-1.amzn2.0.1
fixed
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-enhanced-debuginfo
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-filesystem
Amazon Linux 1
2:8.2.4621-1.1.amzn1
fixed
Amazon Linux 2
2:8.2.4857-1.amzn2.0.1
fixed
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-minimal
Amazon Linux 1
2:8.2.4621-1.1.amzn1
fixed
Amazon Linux 2
2:8.2.4857-1.amzn2.0.1
fixed
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
vim-minimal-debuginfo
Amazon Linux 2023
2:9.0.1160-1.amzn2023.0.2
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
vim
CBL-Mariner 1.0
0:8.2.4281-1.cm1
fixed
CBL-Mariner 2.0
0:8.2.4233-1.cm2
fixed
Common Weakness Enumeration
References
https://github.com/vim/vim/commit/a4bc2dd7cccf5a4a9f78b58b6f35a45d17164323
https://huntr.dev/bounties/ecc8f488-01a0-477f-848f-e30b8e524bba
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/
https://security.gentoo.org/glsa/202208-32
https://github.com/vim/vim/commit/a4bc2dd7cccf5a4a9f78b58b6f35a45d17164323
https://huntr.dev/bounties/ecc8f488-01a0-477f-848f-e30b8e524bba
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/
https://security.gentoo.org/glsa/202208-32