Skip to main content
定价企业版
首页/漏洞/CVE-2022-2345

CVE-2022-2345

7.8HIGH

Use After Free in GitHub repository vim/vim prior to 9.0.0046.

发布于: 7/8/2022更新于: 11/21/2024
在NVD查看在MITRE查看

描述

Use After Free in GitHub repository vim/vim prior to 9.0.0046.

AI分析AI驱动

受影响产品

vimvim
fedoraprojectfedora
35

参考资料

  • https://github.com/vim/vim/commit/32acf1f1a72ebb9d8942b9c9d80023bf1bb668ea
    PatchThird Party Advisory
  • https://huntr.dev/bounties/1eed7009-db6d-487b-bc41-8f2fd260483f
    ExploitPatchThird Party Advisory
  • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/
  • https://security.gentoo.org/glsa/202208-32
    Third Party Advisory
  • https://security.gentoo.org/glsa/202305-16
  • https://github.com/vim/vim/commit/32acf1f1a72ebb9d8942b9c9d80023bf1bb668ea
    PatchThird Party Advisory
  • https://huntr.dev/bounties/1eed7009-db6d-487b-bc41-8f2fd260483f
    ExploitPatchThird Party Advisory
  • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/
  • https://security.gentoo.org/glsa/202208-32
    Third Party Advisory
  • https://security.gentoo.org/glsa/202305-16

CVSS v3.x分数

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

弱点类型

CWE-416CWE-416

快速操作

在Exploit-DB搜索在Google搜索PoC在GitHub搜索