CVE-2022-2522 - OpenCVE

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Vim	Vim

Configuration 1 [-]

cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*

References

Link	Resource
https://github.com/vim/vim/commit/5fa9f23a63651a8abdb074b4fc2ec9b1adc6b089	Patch Third Party Advisory
https://github.com/vim/vim/commit/b9e717367c395490149495cf375911b5d9de889e	Patch Third Party Advisory
https://huntr.dev/bounties/3a2d83af-9542-4d93-8784-98b115135a22	Exploit Patch Third Party Advisory
https://huntr.dev/bounties/3a2d83af-9542-4d93-8784-98b115135a22/	Exploit Third Party Advisory
https://security.gentoo.org/glsa/202305-16

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: @huntrdev

Published: 2022-07-25T00:00:00

Updated: 2023-05-03T00:00:00

Reserved: 2022-07-23T00:00:00

Link: CVE-2022-2522

JSON object: View

NVD Information

Status : Modified

Published: 2022-07-25T14:15:10.930

Modified: 2023-05-03T12:16:00.763

Link: CVE-2022-2522

JSON object: View

Redhat Information

No data.

CWE

CWE-122

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD18C140-EEEC-44D3-9C13-58611C3E7D99", "versionEndExcluding": "9.0.0061", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061."}, {"lang": "es", "value": "Un Desbordamiento de B\u00fafer en la regi\u00f3n Heap de la Memoria en el repositorio de GitHub vim/vim versiones anteriores a 9.0.0061."}], "id": "CVE-2022-2522", "lastModified": "2023-05-03T12:16:00.763", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security@huntr.dev", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-07-25T14:15:10.930", "references": [{"source": "security@huntr.dev", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/vim/vim/commit/5fa9f23a63651a8abdb074b4fc2ec9b1adc6b089"}, {"source": "security@huntr.dev", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/vim/vim/commit/b9e717367c395490149495cf375911b5d9de889e"}, {"source": "security@huntr.dev", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://huntr.dev/bounties/3a2d83af-9542-4d93-8784-98b115135a22"}, {"source": "security@huntr.dev", "tags": ["Exploit", "Third Party Advisory"], "url": "https://huntr.dev/bounties/3a2d83af-9542-4d93-8784-98b115135a22/"}, {"source": "security@huntr.dev", "url": "https://security.gentoo.org/glsa/202305-16"}], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}], "source": "security@huntr.dev", "type": "Primary"}]}