Lucene search
Veracode Vulnerability DatabaseVERACODE:36893HistorySep 01, 2022 - 11:00 a.m.
Buffer Overflow
2022-09-0111:00:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
vim
buffer overflow
heap-based
latin_ptr2len
vulnerability
memory access
out of bound writes
software
EPSS
0.001
Percentile
39.3%
vim is vulnerable to heap-based buffer overflow. The vulnerability exists in the latin_ptr2len function in src/mbyte.c due to lack of validation memory access, allowing an attacker to perform arbitrary out of bound writes.
References
github.com/advisories/GHSA-5wxm-v343-g7f8
github.com/vim/vim/commit/f6d39c31d2177549a986d170e192d8351bd571e2
github.com/vim/vim/commit/f6d39c31d2177549a986d170e192d8351bd571e2
huntr.dev/bounties/389aeccd-deb9-49ae-9b6a-24c12d79b02e
lists.fedoraproject.org/archives/list/[email protected]/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/
security-tracker.debian.org/tracker/CVE-2022-2849
security.gentoo.org/glsa/202305-16
Related
huntr
huntr
Heap-based Buffer Overflow in function latin_ptr2len
2022-08-15 03:57:34
ubuntucve
ubuntucve
CVE-2022-2849
2022-08-17 00:00:00
debiancve
debiancve
CVE-2022-2849
2022-08-17 18:15:08
prion
prion
Heap overflow
2022-08-17 18:15:00
cbl_mariner
cbl_mariner
CVE-2022-2849 affecting package vim for versions less than 9.0.0325-1
2022-09-16 06:05:42
CVE-2022-2849 affecting package vim 9.0.0181-1
2022-09-17 05:56:39
cvelist
cvelist
CVE-2022-2849 Heap-based Buffer Overflow in vim/vim
2022-08-17 00:00:00
redhatcve
redhatcve
CVE-2022-2849
2022-08-29 10:42:43
cnvd
cnvd
Vim latin_ptr2len function buffer overflow vulnerability
2022-08-19 00:00:00
alpinelinux
alpinelinux
CVE-2022-2849
2022-08-17 18:15:08
cve
cve
CVE-2022-2849
2022-08-17 18:15:08
nvd
nvd
CVE-2022-2849
2022-08-17 18:15:08
cloudlinux
cloudlinux
Fixed CVEs in vim: CVE-2022-2845, CVE-2022-2849
2022-08-25 15:52:44
fedora
fedora
[SECURITY] Fedora 37 Update: vim-9.0.412-1.fc37
2022-09-14 00:28:23
openvas
openvas
Fedora: Security Advisory for vim (FEDORA-2022-b9edf60581)
2022-09-15 00:00:00
Ubuntu: Security Advisory (USN-5995-1)
2023-04-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3229-1)
2022-09-12 00:00:00
nessus
nessus
Amazon Linux AMI : vim (ALAS-2023-1716)
2023-04-06 00:00:00
Amazon Linux 2 : vim (ALAS-2022-1868)
2022-10-21 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5995-1)
2023-04-04 00:00:00
amazon
amazon
Important: vim
2023-03-30 22:50:00
Low: vim
2022-10-17 21:46:00
osv
osv
vim vulnerabilities
2023-04-04 08:58:38
gvim-9.0.0453-2.1 on GA media
2024-06-15 00:00:00
ubuntu
ubuntu
Vim vulnerabilities
2023-04-04 00:00:00
cloudfoundry
cloudfoundry
USN-5995-1: Vim vulnerabilities | Cloud Foundry
2023-04-24 00:00:00
ibm
ibm
suse
suse
Security update for vim (important)
2022-09-09 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0380
2023-04-25 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0568
2023-04-19 00:00:00
mageia
mageia
Updated vim packages fix security vulnerability
2022-11-19 01:50:51
gentoo
gentoo
Vim, gVim: Multiple Vulnerabilities
2023-05-03 00:00:00
avleonov
avleonov