7.8Hoch
CVE-2022-3037Use After Free in vim/vim
Beschreibung
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
Schwachstellentyp (CWE):
CWE-416
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://huntr.dev/bounties/af4c2f2d-d754-4607-b565-9e92f3f717b5 ExploitPatchThird Party Advisory
- https://github.com/vim/vim/commit/4f1b083be43f351bc107541e7b0c9655a5d2c0bb PatchThird Party Advisory
- FEDORA-2022-221bd89404 vendor-advisoryMailing ListThird Party Advisory
- FEDORA-2022-35d9bdb7dc vendor-advisoryMailing ListThird Party Advisory
- FEDORA-2022-b9edf60581 vendor-advisoryMailing ListThird Party Advisory
CPE-Treffer (NVD) (5)
cpe:2.3:a:neovim:neovim:*:*:*:*:*:*:*:*≥ 0.5.0 < 0.9.0cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*< 9.0.0322cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*