2048353 – (CVE-2022-0368) CVE-2022-0368 vim: Out-of-bounds Read in vim

Bug 2048353 (CVE-2022-0368) - CVE-2022-0368 vim: Out-of-bounds Read in vim

Summary: CVE-2022-0368 vim: Out-of-bounds Read in vim

Keywords:
Status:	NEW
Alias:	CVE-2022-0368
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Nobody
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2048403 2048404 2048405
Blocks:	2048354
TreeView+	depends on / blocked

Reported:	2022-01-31 04:09 UTC by Avinash Hanwate
Modified:	2023-10-25 17:21 UTC (History)
CC List:	11 users (show)
Fixed In Version:	vim 8.2.4266
Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description Avinash Hanwate 2022-01-31 04:09:11 UTC

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

https://huntr.dev/bounties/bca9ce1f-400a-4bf9-9207-3f3187cb3fa9
https://github.com/vim/vim/commit/8d02ce1ed75d008c34a5c9aaa51b67cbb9d33baa

Comment 2 Sandipan Roy 2022-01-31 07:12:21 UTC

Created vim tracking bugs for this issue:

Affects: fedora-34 [bug 2048403]
Affects: fedora-35 [bug 2048404]

Note You need to log in before you can comment on or make changes to this bug.