kritik
CVE-2022-3520
vim: Heap-based Buffer Overflow
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: Amazon (yüksek), Red Hat (düşük), Ubuntu (düşük).
Açıklama
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 3.0 | vim | 8.2.5169-5.ph3 |
| Photon OS 4.0 | vim, vim-extra | 8.2.5169-5.ph4 |
| alpine 3.15 | vim | 8.2.4836-r1 |
| alpine 3.16 | vim | 8.2.5000-r1 |
| amazon linux 1 | vim-common, vim-data, vim-debuginfo ve 3 tane daha | 2:9.0.828-1.1.amzn1 |
| amazon linux 2 | vim-X11, vim-common, vim-data ve 4 tane daha | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2023 | vim-common, vim-common-debuginfo, vim-data ve 8 tane daha | 2:9.0.1160-1.amzn2023.0.2 |
| debian 11 | vim | düzeltme belirtilmemiş |
| debian 12 | vim | 2:9.0.0813-1 |
| debian 13 | vim | 2:9.0.0813-1 |
| debian 14 | vim | 2:9.0.0813-1 |
| echo | vim | 2:9.0.0813-1 |
20 kaynaktaki 50 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 3.0 | vim | 8.2.5169-5.ph3 |
| Photon OS 4.0 | vim | 8.2.5169-5.ph4 |
| Photon OS 4.0 | vim-extra | 8.2.5169-5.ph4 |
| alpine 3.15 | vim | 8.2.4836-r1 |
| alpine 3.16 | vim | 8.2.5000-r1 |
| amazon linux 1 | vim-common | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-data | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-debuginfo | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-enhanced | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-filesystem | 2:9.0.828-1.1.amzn1 |
| amazon linux 1 | vim-minimal | 2:9.0.828-1.1.amzn1 |
| amazon linux 2 | vim-X11 | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-common | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-data | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-debuginfo | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-enhanced | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-filesystem | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2 | vim-minimal | 2:9.0.828-1.amzn2.0.1 |
| amazon linux 2023 | vim-common | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-common-debuginfo | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-data | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-debuginfo | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-debugsource | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-default-editor | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-enhanced | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-enhanced-debuginfo | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-filesystem | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-minimal | 2:9.0.1160-1.amzn2023.0.2 |
| amazon linux 2023 | vim-minimal-debuginfo | 2:9.0.1160-1.amzn2023.0.2 |
| debian 11 | vim | düzeltme belirtilmemiş |
| debian 12 | vim | 2:9.0.0813-1 |
| debian 13 | vim | 2:9.0.0813-1 |
| debian 14 | vim | 2:9.0.0813-1 |
| echo | vim | 2:9.0.0813-1 |
| rapidfort ubuntu 20.04 | rf-vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 20.04 | vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 22.04 | rf-vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 22.04 | vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 24.04 | rf-vim | 2:8.2.3995-1ubuntu2.12 |
| rapidfort ubuntu 24.04 | vim | 2:8.2.3995-1ubuntu2.12 |
| Red Hat | vim | düzeltme belirtilmemiş |
| Red Hat | vim-X11 | düzeltme belirtilmemiş |
| Red Hat | vim-common | düzeltme belirtilmemiş |
| Red Hat | vim-enhanced | düzeltme belirtilmemiş |
| Red Hat | vim-filesystem | düzeltme belirtilmemiş |
| Red Hat | vim-minimal | düzeltme belirtilmemiş |
| root.io debian 12 | rootio-vim | 2:9.0.0813-1 |
| ubuntu 20.04 | vim | 2:8.1.2269-1ubuntu5.18 |
| ubuntu 20.04-ESM | vim | 2:8.1.2269-1ubuntu5.18 |
| ubuntu 22.04 | vim | 2:8.2.3995-1ubuntu2.12 |
Referanslar
- https://access.redhat.com/security/cve/CVE-2022-3520
- https://github.com/vim/vim/commit/36343ae0fb7247e060abfd35fb8e4337b33abb4b
- https://huntr.dev/bounties/c1db3b70-f4fe-481f-8a24-0b1449c94246
- https://nvd.nist.gov/vuln/detail/CVE-2022-3520
- https://security.gentoo.org/glsa/202305-16
- https://security.netapp.com/advisory/ntap-20241115-0010/
- https://ubuntu.com/security/notices/USN-6420-1
- https://www.cve.org/CVERecord?id=CVE-2022-3520