Bug 2046436 (CVE-2022-0351) - CVE-2022-0351 vim: access of memory location before start of buffer
Summary: CVE-2022-0351 vim: access of memory location before start of buffer
Keywords:
Status: NEW
Alias: CVE-2022-0351
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2046437 2046528 2046604 2046605
Blocks: 2046438
TreeView+ depends on / blocked
 
Reported: 2022-01-26 16:52 UTC by Guilherme de Almeida Suckevicz
Modified: 2023-07-07 08:29 UTC (History)
16 users (show)

Fixed In Version: vim 8.2.4227
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in vim. The vulnerability occurs due to too many recursions, which can lead to a segmentation fault. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Guilherme de Almeida Suckevicz 2022-01-26 16:52:33 UTC 
Access of Memory Location Before Start of Buffer in Conda vim prior to 8.2.

Reference:
https://huntr.dev/bounties/8b36db58-b65c-4298-be7f-40b9e37fd161

Upstream patch:
https://github.com/vim/vim/commit/fe6fb267e6ee5c5da2f41889e4e0e0ac5bf4b89d
Comment 1 Guilherme de Almeida Suckevicz 2022-01-26 16:52:48 UTC 
Created vim tracking bugs for this issue:

Affects: fedora-all [bug 2046437]
Comment 2 juneau 2022-01-26 21:29:12 UTC 
Marking services affected/delegated for Yet Another Vim Flaw that is low/moderate in severity and unlikely to occur.
Note You need to log in before you can comment on or make changes to this bug.