Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2022-3296
HistorySep 26, 2022 - 12:18 p.m.

CVE-2022-3296

2022-09-2612:18:55
redhat.com
access.redhat.com
20
vim
buffer overflow vulnerability
code execution
specially crafted files
memory corruption

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

48.3%

JSON

A stack-based buffer overflow vulnerability was found in vim’s ex_finally() function of the src/ex_eval.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a bug that causes an application to crash, possibly executing code and corrupting memory.

Mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.

Related

ubuntucve 1
prion 1
nessus 32
nvd 1
alpinelinux 1
openvas 24
cbl_mariner 2
huntr 1
cve 1
veracode 1
cvelist 1
slackware 1
debiancve 1
cloudlinux 1
redos 1
fedora 3
amazon 1
ibm 1
photon 2
mageia 1
gentoo 1
ubuntucve
ubuntucve
CVE-2022-3296
2022-09-25 00:00:00
prion
prion
Stack overflow
2022-09-25 17:15:00
nessus
nessus
Slackware Linux 15.0 / current vim Vulnerability (SSA:2022-269-02)
2022-09-26 00:00:00
CBL Mariner 2.0 Security Update: vim (CVE-2022-3296)
2023-03-28 00:00:00
EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1140)
2023-01-06 00:00:00
nvd
nvd
CVE-2022-3296
2022-09-25 17:15:09
alpinelinux
alpinelinux
CVE-2022-3296
2022-09-25 17:15:09
openvas
openvas
Slackware: Security Advisory (SSA:2022-269-02)
2022-09-27 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1140)
2023-01-09 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1116)
2023-01-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-3296 affecting package vim for versions less than 9.0.0614-1
2022-10-17 22:54:40
CVE-2022-3296 affecting package vim 9.0.0404-1
2022-10-13 00:40:15
huntr
huntr
Stack-based Buffer Overflow in function ex_finally
2022-09-22 15:58:17
cve
cve
CVE-2022-3296
2022-09-25 17:15:09
veracode
veracode
Stack Buffer Overflow
2022-10-11 13:15:54
cvelist
cvelist
CVE-2022-3296 Stack-based Buffer Overflow in vim/vim
2022-09-25 00:00:00
slackware
slackware
[slackware-security] vim
2022-09-26 19:50:40
debiancve
debiancve
CVE-2022-3296
2022-09-25 17:15:09
cloudlinux
cloudlinux
Fixed CVEs in vim: CVE-2022-3296, CVE-2022-3324
2022-10-13 16:56:52
redos
redos
ROS-20221004-01
2022-10-04 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35
2022-10-17 11:34:07
[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36
2022-10-14 13:03:30
[SECURITY] Fedora 37 Update: vim-9.0.828-1.fc37
2022-11-10 22:58:15
amazon
amazon
Important: vim
2023-03-02 22:35:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues (2)
2024-08-01 17:22:29
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0380
2023-04-25 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0568
2023-04-19 00:00:00
mageia
mageia
Updated vim packages fix security vulnerability
2022-11-19 01:50:51
gentoo
gentoo
Vim, gVim: Multiple Vulnerabilities
2023-05-03 00:00:00

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

48.3%

JSON
Related for RH:CVE-2022-3296
ubuntucve1prion1nessus32nvd1alpinelinux1openvas24cbl_mariner2huntr1cve1veracode1cvelist1slackware1debiancve1cloudlinux1redos1fedora3amazon1ibm1photon2mageia1gentoo1