CVE-2022-0128

Published: Jan 6, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

vim is vulnerable to Out-of-bounds Read

Affected (17)

Products: Vim: Vim · Apple: Mac Os X, Macos

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vim Vim	Before 8.2.4009

Configuration B

16 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.15.7 security_update_2020-001
Apple Mac Os X	Version 10.15.7 security_update_2021-001
Apple Mac Os X	Version 10.15.7 security_update_2021-002
Apple Mac Os X	Version 10.15.7 security_update_2021-003
Apple Mac Os X	Version 10.15.7 security_update_2021-004
Apple Mac Os X	Version 10.15.7 security_update_2021-005
Apple Mac Os X	Version 10.15.7 security_update_2021-006
Apple Mac Os X	Version 10.15.7 security_update_2021-007
Apple Mac Os X	Version 10.15.7 security_update_2021-008
Apple Mac Os X	Version 10.15.7 security_update_2022-001
Apple Mac Os X	Version 10.15.7 security_update_2022-002
Apple Mac Os X	Version 10.15.7 security_update_2022-003
Apple Macos	Before 10.15.7
Apple Macos	From 11.0 to 11.6.6
Apple Macos	Version 10.15.7
Apple Macos	Version 10.15.7 security_update_2022-004

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (20)

http://seclists.org/fulldisclosure/2022/Jul/14

Source: security@huntr.dev

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Mar/29

Source: security@huntr.dev

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/35

Source: security@huntr.dev

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/01/15/1

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://github.com/vim/vim/commit/d3a117814d6acbf0dca3eff1a7626843b9b3734a

Source: security@huntr.dev

PatchThird Party Advisory

https://huntr.dev/bounties/63f51299-008a-4112-b85b-1e904aadd4ba

Source: security@huntr.dev

ExploitIssue TrackingPatchThird Party Advisory

https://security.gentoo.org/glsa/202208-32

Source: security@huntr.dev

Third Party Advisory

https://support.apple.com/kb/HT213183

Source: security@huntr.dev

Release NotesThird Party Advisory

https://support.apple.com/kb/HT213256

Source: security@huntr.dev

Third Party Advisory

https://support.apple.com/kb/HT213343

Source: security@huntr.dev

Third Party Advisory

http://seclists.org/fulldisclosure/2022/Jul/14

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Mar/29

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/35

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/01/15/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://github.com/vim/vim/commit/d3a117814d6acbf0dca3eff1a7626843b9b3734a

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://huntr.dev/bounties/63f51299-008a-4112-b85b-1e904aadd4ba

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

https://security.gentoo.org/glsa/202208-32

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213183

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://support.apple.com/kb/HT213256

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213343

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.