7.3
Élevée
CVE-2022-4141 Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used…
Description
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| vim/vim 9.0 | premières → < 9.0.0947 | 9.0.0947 |
Références
- huntr.dev huntr.dev
- github.com github.com
- FEDORA-2022-1e14f3ae45 lists.fedoraproject.org
- FEDORA-2022-fc4c513d06 lists.fedoraproject.org
- GLSA-202305-16 security.gentoo.org
- [debian-lts-announce] 20230612 [SECURITY] [DLA 3453-1] vim security update lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de vim/vim
Les 159 CVE de vim/vim →
CVE-2023-5535
Use After Free in GitHub repository vim/vim prior to v9.0.2010
7.8
Élevée
CVE-2023-5441
NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960
6.2
Moyenne
CVE-2023-5344
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969
4.0
Moyenne
CVE-2023-4781
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873
7.8
Élevée