Lucene search

@huntrdevCVELIST:CVE-2022-3278

HistorySep 23, 2022 - 12:00 a.m.

CVE-2022-3278 NULL Pointer Dereference in vim/vim

2022-09-2300:00:00

CWE-476

@huntrdev

www.cve.org

github repository

vim 9.0.0552

null pointer dereference

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

46.3%

JSON

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.0552",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vim/vim/commit/69082916c8b5d321545d60b9f5facad0a2dd5a4e

huntr.dev/bounties/a9fad77e-f245-4ce9-ba15-c7d4c86c4612

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/

security.gentoo.org/glsa/202305-16