2116874 – (CVE-2022-2580) CVE-2022-2580 vim: Out-of-bounds Read in vim

Bug 2116874 (CVE-2022-2580) - CVE-2022-2580 vim: Out-of-bounds Read in vim

Summary: CVE-2022-2580 vim: Out-of-bounds Read in vim

Keywords:
Status:	CLOSED WONTFIX
Alias:	CVE-2022-2580
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	low
Severity:	low
Target Milestone:	---
Assignee:	Red Hat Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2116880 2116882
Blocks:	2113802
TreeView+	depends on / blocked

Reported:	2022-08-09 13:23 UTC by Sandipan Roy
Modified:	2022-09-02 10:55 UTC (History)
CC List:	4 users (show)
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.
Clone Of:
Environment:
Last Closed:	2022-09-02 10:55:49 UTC
Embargoed:

Attachments	(Terms of Use)

Description Sandipan Roy 2022-08-09 13:23:37 UTC

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.

https://huntr.dev/bounties/c5f2f1d4-0441-4881-b19c-055acaa16249
https://github.com/vim/vim/commit/1e56bda9048a9625bce6e660938c834c5c15b07d

Comment 1 Sandipan Roy 2022-08-09 13:34:41 UTC

Created vim tracking bugs for this issue:

Affects: fedora-35 [bug 2116880]
Affects: fedora-36 [bug 2116882]

Comment 2 Product Security DevOps Team 2022-09-02 10:55:48 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-2580

Note You need to log in before you can comment on or make changes to this bug.