Lucene search

@huntrdevCVELIST:CVE-2022-2980

HistoryAug 25, 2022 - 12:00 a.m.

CVE-2022-2980 NULL Pointer Dereference in vim/vim

2022-08-2500:00:00

CWE-476

@huntrdev

www.cve.org

cve-2022-2980 github repository prior 9.0.0259 pointer dereference

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

39.7%

JSON

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.0259",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vim/vim/commit/80525751c5ce9ed82c41d83faf9ef38667bf61b1

huntr.dev/bounties/6e7b12a5-242c-453d-b39e-9625d563b0ea

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/

security.gentoo.org/glsa/202305-16