Skip to main content
定价企业版
首页/漏洞/CVE-2022-2889

CVE-2022-2889

7.8HIGH

Use After Free in GitHub repository vim/vim prior to 9.0.0225.

发布于: 8/19/2022更新于: 11/21/2024
在NVD查看在MITRE查看

描述

Use After Free in GitHub repository vim/vim prior to 9.0.0225.

AI分析AI驱动

受影响产品

vimvim
fedoraprojectfedora
35

参考资料

  • https://github.com/vim/vim/commit/91c7cbfe31bbef57d5fcf7d76989fc159f73ef15
    PatchThird Party Advisory
  • https://huntr.dev/bounties/d1ac9817-825d-49ce-b514-1d5b12b6bdaa
    ExploitPatchThird Party Advisory
  • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/
  • https://security.gentoo.org/glsa/202305-16
  • https://github.com/vim/vim/commit/91c7cbfe31bbef57d5fcf7d76989fc159f73ef15
    PatchThird Party Advisory
  • https://huntr.dev/bounties/d1ac9817-825d-49ce-b514-1d5b12b6bdaa
    ExploitPatchThird Party Advisory
  • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/
  • https://security.gentoo.org/glsa/202305-16

CVSS v3.x分数

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

弱点类型

CWE-416CWE-416

快速操作

在Exploit-DB搜索在Google搜索PoC在GitHub搜索