7.8Alta
CVE-2022-3037Use After Free in vim/vim
Descripción
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
Debilidad (CWE):
CWE-416
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://huntr.dev/bounties/af4c2f2d-d754-4607-b565-9e92f3f717b5 ExploitPatchThird Party Advisory
- https://github.com/vim/vim/commit/4f1b083be43f351bc107541e7b0c9655a5d2c0bb PatchThird Party Advisory
- FEDORA-2022-221bd89404 vendor-advisoryMailing ListThird Party Advisory
- FEDORA-2022-35d9bdb7dc vendor-advisoryMailing ListThird Party Advisory
- FEDORA-2022-b9edf60581 vendor-advisoryMailing ListThird Party Advisory
Coincidencias CPE (NVD) (5)
cpe:2.3:a:neovim:neovim:*:*:*:*:*:*:*:*≥ 0.5.0 < 0.9.0cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*< 9.0.0322cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*