Description
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
CVSS breakdown
CVSS 3.0
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Apple / macOS12.6
- Debian / debian_linux9.0 – 9.0
- Debian / debian_linux10.0 – 10.0
- vim / vim8.2
- vim / vim/vimunspecified – 8.2
References
- MISChttps://huntr.dev/bounties/8b36db58-b65c-4298-be7f-40b9e37fd161
- PATCHhttps://github.com/vim/vim/commit/fe6fb267e6ee5c5da2f41889e4e0e0ac5bf4b89d
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2022/05/msg00022.html
- MISChttps://security.gentoo.org/glsa/202208-32
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213444
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213488
- MAILING_LISThttp://seclists.org/fulldisclosure/2022/Oct/41
- MAILING_LISThttp://seclists.org/fulldisclosure/2022/Oct/28
- MAILING_LISThttp://seclists.org/fulldisclosure/2022/Oct/43
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
Updated 19m ago · 8 sources