CVE-2022-0392

Name
CVE-2022-0392
Description
Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://github.com/vim/vim/commit/806d037671e133bd28a7864248763f643967973a
CONFIRM https://huntr.dev/bounties/d00a2acd-1935-4195-9d5b-4115ef6b3126
Third Party Advisory https://security.gentoo.org/glsa/202208-32
Vendor Advisory https://support.apple.com/kb/HT213488
Vendor Advisory https://support.apple.com/kb/HT213444
Third Party Advisory http://seclists.org/fulldisclosure/2022/Oct/28
Third Party Advisory http://seclists.org/fulldisclosure/2022/Oct/41
Third Party Advisory http://seclists.org/fulldisclosure/2022/Oct/43
Mailing List https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:* vim >= None < 8.2.4218

Vulnerable and fixed packages

Source package Branch Version Maintainer Status