CVE-2022-2000
Published: 9 June 2022
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
Priority
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.8 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | None |
User interaction | Required |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2000
- https://huntr.dev/bounties/f61a64e2-d163-461b-a77e-46ab38e021f0
- https://github.com/vim/vim/commit/44a3f3353e0407e9fffee138125a6927d1c9e7e5 (v8.2.5063)
- https://github.com/vim/vim/commit/44a3f3353e0407e9fffee138125a6927d1c9e7e5
- https://ubuntu.com/security/notices/USN-5516-1
- NVD
- Launchpad
- Debian