Lucene search

@huntrdevCVELIST:CVE-2022-2923

HistoryAug 22, 2022 - 12:00 a.m.

CVE-2022-2923 NULL Pointer Dereference in vim/vim

2022-08-2200:00:00

CWE-476

@huntrdev

www.cve.org

cve-2022-2923

null pointer dereference

vim/vim

github

prior to 9.0.0240

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.0240",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e

huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/

security.gentoo.org/glsa/202305-16