CVE-2022-0393: Out-of-bounds Read in vim/vim
First published: Fri Jan 28 2022(Updated: )
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Credit: security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Vim | <8.2.4233 | |
| Fedora | =34 | |
| Fedora | =35 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/vim/vim/commit/a4bc2dd7cccf5a4a9f78b58b6f35a45d17164323
- https://huntr.dev/bounties/ecc8f488-01a0-477f-848f-e30b8e524bba
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/
- https://security.gentoo.org/glsa/202208-32
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
Frequently Asked Questions
What is the severity of CVE-2022-0393?
CVE-2022-0393 is categorized as a medium severity vulnerability that involves an out-of-bounds read in Vim.
How do I fix CVE-2022-0393?
To fix CVE-2022-0393, upgrade to Vim version 8.2.4233 or later.
Which versions of Vim are affected by CVE-2022-0393?
CVE-2022-0393 affects all versions of Vim prior to 8.2.4233.
Is CVE-2022-0393 present in Fedora 34 and 35?
Yes, CVE-2022-0393 is present in Fedora 34 and 35 using vulnerable versions of Vim.
What types of issues does CVE-2022-0393 cause?
CVE-2022-0393 can lead to potential information leakage and instability in applications using Vim.
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/references
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vim
- canonical/vim
- vendor/fedoraproject
- canonical/fedora
- version/fedora/34
- version/fedora/35