7.8Yüksek
CVE-2022-3037Use After Free in vim/vim
Açıklama
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
Zayıflık türü (CWE):
CWE-416
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://huntr.dev/bounties/af4c2f2d-d754-4607-b565-9e92f3f717b5 ExploitPatchThird Party Advisory
- https://github.com/vim/vim/commit/4f1b083be43f351bc107541e7b0c9655a5d2c0bb PatchThird Party Advisory
- FEDORA-2022-221bd89404 vendor-advisoryMailing ListThird Party Advisory
- FEDORA-2022-35d9bdb7dc vendor-advisoryMailing ListThird Party Advisory
- FEDORA-2022-b9edf60581 vendor-advisoryMailing ListThird Party Advisory
CPE eşleşmeleri (NVD) (5)
cpe:2.3:a:neovim:neovim:*:*:*:*:*:*:*:*≥ 0.5.0 < 0.9.0cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*< 9.0.0322cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*