VDB
BDU%3A2022-00978
BDU%3A2022-00978
PUBLISHED
CVSS 1.899999976158142 LOW
Уязвимость функции compile_get_env() текстового редактора vim , вызванная переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
1.899999976158142
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project | Debian GNU/Linux, Fedora, vim |
Timeline
- Feb 28, 2022 CVE Published
References
- https://github.com/vim/vim/commit/5f25c3855071bd7e26255c68bf458b1b5cf92f39 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/ url
- http://www.openwall.com/lists/oss-security/2022/01/15/1 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ url
- https://huntr.dev/bounties/ac5d7005-07c6-4a0a-b251-ba9cdbf6738b advisory
- https://lists.fedoraproject.org/archives/search?mlist=package-announce%40lists.fedoraproject.org&q=CVE-2022-0158 advisory
- https://security-tracker.debian.org/tracker/CVE-2022-0158 advisory