Lucene search
Veracode Vulnerability DatabaseVERACODE:36118HistoryJun 26, 2022 - 4:15 a.m.
Use-After-Free
2022-06-2604:15:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.001 Low
EPSS
Percentile
42.0%
vim is vulnerable to use after free. The vulnerability exists in utf_ptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash.
References
seclists.org/fulldisclosure/2022/Oct/28
seclists.org/fulldisclosure/2022/Oct/41
github.com/vim/vim/commit/409510c588b1eec1ae33511ae97a21eb8e110895
huntr.dev/bounties/949090e5-f4ea-4edf-bd79-cd98f0498a5b
lists.debian.org/debian-lts-announce/2022/06/msg00014.html
lists.debian.org/debian-lts-announce/2022/11/msg00009.html
security-tracker.debian.org/tracker/CVE-2022-1968
security.gentoo.org/glsa/202208-32
security.gentoo.org/glsa/202305-16
support.apple.com/kb/HT213488
Related
prion
prion
Design/Logic Flaw
2022-06-02 14:15:00
ubuntucve
ubuntucve
CVE-2022-1968
2022-06-02 00:00:00
nvd
nvd
CVE-2022-1968
2022-06-02 14:15:34
redhatcve
redhatcve
CVE-2022-1968
2022-06-08 16:07:03
cve
cve
CVE-2022-1968
2022-06-02 14:15:34
alpinelinux
alpinelinux
CVE-2022-1968
2022-06-02 14:15:34
debiancve
debiancve
CVE-2022-1968
2022-06-02 14:15:34
cvelist
cvelist
CVE-2022-1968 Use After Free in vim/vim
2022-06-02 00:00:00
huntr
huntr
Use After Free in function utf_ptr2char
2022-05-30 17:22:08
nessus
nessus
Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5507-1)
2022-07-08 00:00:00
Debian DLA-3053-1 : vim - LTS security update
2022-06-20 00:00:00
EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2263)
2022-08-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5507-1)
2022-08-26 00:00:00
Debian: Security Advisory (DLA-3053-1)
2022-06-21 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2263)
2022-08-18 00:00:00
osv
osv
vim vulnerabilities
2022-07-08 02:49:09
vim - security update
2022-06-20 00:00:00
vim vulnerabilities
2023-04-04 08:58:38
ubuntu
ubuntu
Vim vulnerabilities
2022-07-08 00:00:00
Vim vulnerabilities
2023-04-04 00:00:00
debian
debian
[SECURITY] [DLA 3053-1] vim security update
2022-06-20 12:11:57
[SECURITY] [DLA 3182-1] vim security update
2022-11-08 14:54:53
redos
redos
ROS-20220701-01
2022-07-01 00:00:00
cloudfoundry
cloudfoundry
USN-5995-1: Vim vulnerabilities | Cloud Foundry
2023-04-24 00:00:00
amazon
amazon
Medium: vim
2022-07-28 20:41:00
Medium: vim
2022-07-19 01:26:00
suse
suse
Security update for vim (important)
2022-09-09 00:00:00
gentoo
gentoo
Vim, gVim: Multiple Vulnerabilities
2023-05-03 00:00:00
Vim, gVim: Multiple Vulnerabilities
2022-08-21 00:00:00
apple
apple
About the security content of macOS Ventura 13
2022-10-24 00:00:00
avleonov
avleonov