CVE-2022-1771

CVE-2022-1771

Name

CVE-2022-1771

Description

Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
CONFIRM	https://huntr.dev/bounties/faa74175-5317-4b71-a363-dfc39094ecbb
MISC	https://github.com/vim/vim/commit/51f0bfb88a3554ca2dde777d78a59880d1ee37a8
Third Party Advisory	https://security.gentoo.org/glsa/202208-32
GENTOO	https://security.gentoo.org/glsa/202305-16

Type

URI

CONFIRM

https://huntr.dev/bounties/faa74175-5317-4b71-a363-dfc39094ecbb

MISC

https://github.com/vim/vim/commit/51f0bfb88a3554ca2dde777d78a59880d1ee37a8

Third Party Advisory

https://security.gentoo.org/glsa/202208-32

GENTOO

https://security.gentoo.org/glsa/202305-16

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:vim:vim::::::::`	vim	>= None	< 8.2.4975

CPE URI

Source package

Min version

Max version

cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*

vim

>= None

< 8.2.4975

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status
vim	edge-main	8.2.4969-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.4836-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.4708-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.4619-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.4542-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.4350-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.4173-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.3779-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.3650-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.3567-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.3500-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.2.3437-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
vim	edge-main	8.1.1365-r0	None	possibly vulnerable
vim	edge-main	8.0.1521-r0	None	possibly vulnerable
vim	edge-main	8.0.0329-r0	None	possibly vulnerable
vim	edge-main	8.0.0056-r0	None	possibly vulnerable
vim	3.22-main	8.2.4969-r0	None	possibly vulnerable
vim	3.22-main	8.2.4836-r0	None	possibly vulnerable
vim	3.22-main	8.2.4708-r0	None	possibly vulnerable
vim	3.22-main	8.2.4619-r0	None	possibly vulnerable
vim	3.22-main	8.2.4542-r0	None	possibly vulnerable
vim	3.22-main	8.2.4350-r0	None	possibly vulnerable
vim	3.22-main	8.2.4173-r0	None	possibly vulnerable
vim	3.22-main	8.2.3779-r0	None	possibly vulnerable
vim	3.22-main	8.2.3650-r0	None	possibly vulnerable
vim	3.22-main	8.2.3567-r0	None	possibly vulnerable
vim	3.22-main	8.2.3500-r0	None	possibly vulnerable
vim	3.22-main	8.2.3437-r0	None	possibly vulnerable
vim	3.22-main	8.1.1365-r0	None	possibly vulnerable
vim	3.22-main	8.0.1521-r0	None	possibly vulnerable
vim	3.22-main	8.0.0329-r0	None	possibly vulnerable
vim	3.22-main	8.0.0056-r0	None	possibly vulnerable
vim	3.21-main	8.2.4969-r0	None	possibly vulnerable
vim	3.21-main	8.2.4836-r0	None	possibly vulnerable
vim	3.21-main	8.2.4708-r0	None	possibly vulnerable
vim	3.21-main	8.2.4619-r0	None	possibly vulnerable
vim	3.21-main	8.2.4542-r0	None	possibly vulnerable
vim	3.21-main	8.2.4350-r0	None	possibly vulnerable
vim	3.21-main	8.2.4173-r0	None	possibly vulnerable
vim	3.21-main	8.2.3779-r0	None	possibly vulnerable
vim	3.21-main	8.2.3650-r0	None	possibly vulnerable
vim	3.21-main	8.2.3567-r0	None	possibly vulnerable
vim	3.21-main	8.2.3500-r0	None	possibly vulnerable
vim	3.21-main	8.2.3437-r0	None	possibly vulnerable
vim	3.21-main	8.1.1365-r0	None	possibly vulnerable
vim	3.21-main	8.0.1521-r0	None	possibly vulnerable
vim	3.21-main	8.0.0329-r0	None	possibly vulnerable
vim	3.21-main	8.0.0056-r0	None	possibly vulnerable
vim	3.20-main	8.2.4969-r0	None	possibly vulnerable
vim	3.20-main	8.2.4836-r0	None	possibly vulnerable
vim	3.20-main	8.2.4708-r0	None	possibly vulnerable
vim	3.20-main	8.2.4619-r0	None	possibly vulnerable
vim	3.20-main	8.2.4542-r0	None	possibly vulnerable
vim	3.20-main	8.2.4350-r0	None	possibly vulnerable
vim	3.20-main	8.2.4173-r0	None	possibly vulnerable
vim	3.20-main	8.2.3779-r0	None	possibly vulnerable
vim	3.20-main	8.2.3650-r0	None	possibly vulnerable
vim	3.20-main	8.2.3567-r0	None	possibly vulnerable
vim	3.20-main	8.2.3500-r0	None	possibly vulnerable
vim	3.20-main	8.2.3437-r0	None	possibly vulnerable
vim	3.20-main	8.1.1365-r0	None	possibly vulnerable
vim	3.20-main	8.0.1521-r0	None	possibly vulnerable
vim	3.20-main	8.0.0329-r0	None	possibly vulnerable
vim	3.20-main	8.0.0056-r0	None	possibly vulnerable
vim	3.19-main	8.2.4969-r0	None	possibly vulnerable
vim	3.19-main	8.2.4836-r0	None	possibly vulnerable
vim	3.19-main	8.2.4708-r0	None	possibly vulnerable
vim	3.19-main	8.2.4619-r0	None	possibly vulnerable
vim	3.19-main	8.2.4542-r0	None	possibly vulnerable
vim	3.19-main	8.2.4350-r0	None	possibly vulnerable
vim	3.19-main	8.2.4173-r0	None	possibly vulnerable
vim	3.19-main	8.2.3779-r0	None	possibly vulnerable
vim	3.19-main	8.2.3650-r0	None	possibly vulnerable
vim	3.19-main	8.2.3567-r0	None	possibly vulnerable
vim	3.19-main	8.2.3500-r0	None	possibly vulnerable
vim	3.19-main	8.2.3437-r0	None	possibly vulnerable
vim	3.19-main	8.1.1365-r0	None	possibly vulnerable
vim	3.19-main	8.0.1521-r0	None	possibly vulnerable
vim	3.19-main	8.0.0329-r0	None	possibly vulnerable
vim	3.19-main	8.0.0056-r0	None	possibly vulnerable

Source package

Branch

Version

Maintainer

Status

vim

edge-main

8.2.4969-r0