Lucene search

[email protected]CVE-2022-2923

HistoryAug 22, 2022 - 9:15 p.m.

CVE-2022-2923

2022-08-2221:15:08

CWE-476

[email protected]

web.nvd.nist.gov

cve-2022-2923

nvd

github

repository

vim

security

vulnerability

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.

Affected configurations

NVD

Node

vimvimRange<9.0.0240

Node

fedoraprojectfedoraMatch35

CPENameOperatorVersion
vim:vimvimlt9.0.0240

CPE	Name	Operator	Version
vim:vim	vim	lt	9.0.0240

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.0240",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e

huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/

security.gentoo.org/glsa/202305-16

Social References

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

Related for CVE-2022-2923