critique
CVE-2022-3520
vim: Heap-based Buffer Overflow
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, Photon OS. Plus basse selon Amazon (élevée), Red Hat (faible), Ubuntu (faible).
Description
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 3.0 | vim | 8.2.5169-5.ph3 |
| Photon OS 4.0 | vim, vim-extra | 8.2.5169-5.ph4 |
| alpine 3.15 | vim | 8.2.4836-r1 |
| alpine 3.16 | vim | 8.2.5000-r1 |
| amazon linux 1 | vim-common, vim-data, vim-debuginfo et 3 autres | 2:9.0.828-1.1.amzn1 |
| amazon linux 2 | vim-X11, vim-common, vim-data et 4 autres | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2023 | vim-common, vim-common-debuginfo, vim-data et 8 autres | 2:9.0.1160-1.amzn2023.0.2 |
| debian 11 | vim | pas de correctif indiqué |
| debian 12 | vim | 2:9.0.0813-1 |
| debian 13 | vim | 2:9.0.0813-1 |
| debian 14 | vim | 2:9.0.0813-1 |
| echo | vim | 2:9.0.0813-1 |
Afficher les 50 entrées de 20 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 3.0 | vim | 8.2.5169-5.ph3 |
| Photon OS 4.0 | vim | 8.2.5169-5.ph4 |
| Photon OS 4.0 | vim-extra | 8.2.5169-5.ph4 |
| alpine 3.15 | vim | 8.2.4836-r1 |
| alpine 3.16 | vim | 8.2.5000-r1 |
| amazon linux 1 | vim-common | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-data | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-debuginfo | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-enhanced | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-filesystem | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-minimal | 2:9.0.828-1.1.amzn1 |
| amazon linux 2 | vim-X11 | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-common | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-data | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-debuginfo | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-enhanced | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-filesystem | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-minimal | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2023 | vim-common | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-common-debuginfo | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-data | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-debuginfo | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-debugsource | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-default-editor | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-enhanced | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-enhanced-debuginfo | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-filesystem | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-minimal | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-minimal-debuginfo | 2:9.0.1160-1.amzn2023.0.2 |
| debian 11 | vim | pas de correctif indiqué |
| debian 12 | vim | 2:9.0.0813-1 |
| debian 13 | vim | 2:9.0.0813-1 |
| debian 14 | vim | 2:9.0.0813-1 |
| echo | vim | 2:9.0.0813-1 |
| rapidfort ubuntu 20.04 | rf-vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 20.04 | vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 22.04 | rf-vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 22.04 | vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 24.04 | rf-vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 24.04 | vim | 2:8.2.3995-1ubuntu2.12 |
| Red Hat | vim | pas de correctif indiqué |
| Red Hat | vim-X11 | pas de correctif indiqué |
| Red Hat | vim-common | pas de correctif indiqué |
| Red Hat | vim-enhanced | pas de correctif indiqué |
| Red Hat | vim-filesystem | pas de correctif indiqué |
| Red Hat | vim-minimal | pas de correctif indiqué |
| root.io debian 12 | rootio-vim | 2:9.0.0813-1 |
| ubuntu 20.04 | vim | 2:8.1.2269-1ubuntu5.18 |
| ubuntu 20.04-ESM | vim | 2:8.1.2269-1ubuntu5.18 |
| ubuntu 22.04 | vim | 2:8.2.3995-1ubuntu2.12 |
Références
- https://access.redhat.com/security/cve/CVE-2022-3520
- https://github.com/vim/vim/commit/36343ae0fb7247e060abfd35fb8e4337b33abb4b
- https://huntr.dev/bounties/c1db3b70-f4fe-481f-8a24-0b1449c94246
- https://nvd.nist.gov/vuln/detail/CVE-2022-3520
- https://security.gentoo.org/glsa/202305-16
- https://security.netapp.com/advisory/ntap-20241115-0010/
- https://ubuntu.com/security/notices/USN-6420-1
- https://www.cve.org/CVERecord?id=CVE-2022-3520