Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-1381

Date: April 16, 2022

global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

Language: C

Severity Score

Related Resources (16)

https://support.apple.com/kb/HT213488
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/
https://security.gentoo.org/glsa/202208-32
https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1381.json
https://security.alpinelinux.org/vuln/CVE-2022-1381
http://seclists.org/fulldisclosure/2022/Oct/28
https://github.com/vim/vim/commit/f50808ed135ab973296bca515ae4029b321afe47
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/
https://huntr.dev/bounties/55f9c0e8-c221-48b6-a00e-bdcaebaba4a4
http://seclists.org/fulldisclosure/2022/Oct/41
https://security.gentoo.org/glsa/202305-16
https://nvd.nist.gov/vuln/detail/CVE-2022-1381
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/
https://security-tracker.debian.org/tracker/CVE-2022-1381
https://www.mend.io/vulnerability-database/CVE-2022-1381

Severity Score

Weakness Type (CWE)

Out-of-bounds Write

CWE-787

Heap-based Buffer Overflow

CWE-122

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us