Lucene search
CloudLinuxCLSA-2022:1658853743HistoryJul 26, 2022 - 4:42 p.m.
Fixed CVEs in vim: CVE-2022-2289, CVE-2022-2304
2022-07-2616:42:23
repo.cloudlinux.com
103
vim
security fixes
cve-2022-2289
cve-2022-2304
memory access
out of bounds
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
53.0%
- CVE-2022-2289: bail out when diff pointer is no longer valid to avoid accessing
freed memory with diff put - CVE-2022-2304: limit the word length to avoid out of bound accesing
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Centos | 6 | x86_64 | vim-common | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els23.src.rpm |
| Centos | 6 | x86_64 | vim-x11 | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els23.src.rpm |
| Centos | 6 | x86_64 | vim-enhanced | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els23.src.rpm |
| Centos | 6 | x86_64 | vim-minimal | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els23.src.rpm |
| Centos | 6 | x86_64 | vim-filesystem | < 7.4.629 | vim-7.4.629-5.2.el6.tuxcare.els23.src.rpm |
Related
nessus
nessus
CBL Mariner 2.0 Security Update: vim (CVE-2022-2289)
2023-03-20 00:00:00
CBL Mariner 2.0 Security Update: vim (CVE-2022-2304)
2023-03-20 00:00:00
EulerOS 2.0 SP5 : vim (EulerOS-SA-2022-2451)
2022-10-08 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-2289 affecting package vim 8.2.5172-1
2022-08-12 16:45:08
CVE-2022-2289 affecting package vim for versions less than 9.0.0050-2
2022-08-03 21:15:04
CVE-2022-2304 affecting package vim for versions less than 9.0.0050-2
2022-08-03 21:15:04
cvelist
cvelist
CVE-2022-2289 Use After Free in vim/vim
2022-07-03 00:00:00
CVE-2022-2304 Stack-based Buffer Overflow in vim/vim
2022-07-05 00:00:00
redhatcve
redhatcve
CVE-2022-2289
2022-07-05 08:06:17
CVE-2022-2304
2022-07-06 08:35:58
ubuntucve
ubuntucve
CVE-2022-2289
2022-07-03 00:00:00
CVE-2022-2304
2022-07-05 00:00:00
osv
osv
CVE-2022-2289
2022-07-03 15:15:00
CVE-2022-2304
2022-07-05 13:15:00
vim vulnerabilities
2022-11-14 19:34:02
cve
cve
CVE-2022-2289
2022-07-03 15:15:08
CVE-2022-2304
2022-07-05 13:15:08
prion
prion
Design/Logic Flaw
2022-07-03 15:15:00
Stack overflow
2022-07-05 13:15:00
huntr
huntr
Heap Use After Free in function ex_diffgetput
2022-06-29 09:00:03
Stack-based Buffer Overflow in function spell_dump_compl
2022-06-29 08:50:34
debiancve
debiancve
CVE-2022-2289
2022-07-03 15:15:08
CVE-2022-2304
2022-07-05 13:15:08
veracode
veracode
Denial Of Service (DoS)
2022-07-18 13:53:51
Denial Of Service (DoS)
2022-07-18 23:52:03
cnvd
cnvd
Vim Resource Management Error Vulnerability (CNVD-2022-68093)
2022-07-06 00:00:00
Vim Buffer Overflow Vulnerability (CNVD-2022-68101)
2022-07-07 00:00:00
alpinelinux
alpinelinux
CVE-2022-2289
2022-07-03 15:15:08
CVE-2022-2304
2022-07-05 13:15:08
nvd
nvd
CVE-2022-2289
2022-07-03 15:15:08
CVE-2022-2304
2022-07-05 13:15:08
fedora
fedora
[SECURITY] Fedora 36 Update: vim-9.0.049-1.fc36
2022-07-14 01:49:09
[SECURITY] Fedora 35 Update: vim-9.0.049-1.fc35
2022-07-21 17:10:23
openvas
openvas
Fedora: Security Advisory for vim (FEDORA-2022-b06fbea2c7)
2022-07-15 00:00:00
Fedora: Security Advisory for vim (FEDORA-2022-9d7a58e376)
2022-07-22 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2451)
2022-10-10 00:00:00
ubuntu
ubuntu
Vim vulnerabilities
2022-11-14 00:00:00
Vim vulnerabilities
2023-08-03 00:00:00
Vim vulnerabilities
2023-04-04 00:00:00
cloudfoundry
cloudfoundry
USN-6270-1: Vim vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
USN-5995-1: Vim vulnerabilities | Cloud Foundry
2023-04-24 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0380
2023-04-25 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0568
2023-04-19 00:00:00
mageia
mageia
Updated vim packages fix security vulnerability
2022-11-19 01:50:51
ibm
ibm
gentoo
gentoo
Vim, gVim: Multiple Vulnerabilities
2023-05-03 00:00:00
Vim, gVim: Multiple Vulnerabilities
2022-08-21 00:00:00
debian
debian
[SECURITY] [DLA 3182-1] vim security update
2022-11-08 14:54:53
suse
suse
Security update for vim (important)
2022-09-09 00:00:00
hp
hp
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
avleonov
avleonov
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
53.0%
Related for CLSA-2022:1658853743