{ "CVE_data_meta": { "ASSIGNER": "security@huntr.dev", "ID": "CVE-2022-0156", "STATE": "PUBLIC", "TITLE": "Use After Free in vim/vim" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "vim/vim", "version": { "version_data": [ { "version_affected": "<", "version_value": "8.2" } ] } } ] }, "vendor_name": "vim" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "vim is vulnerable to Use After Free" } ] }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.0" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-416 Use After Free" } ] } ] }, "references": { "reference_data": [ { "name": "https://huntr.dev/bounties/47dded34-3767-4725-8c7c-9dcb68c70b36", "refsource": "CONFIRM", "url": "https://huntr.dev/bounties/47dded34-3767-4725-8c7c-9dcb68c70b36" }, { "name": "https://github.com/vim/vim/commit/9f1a39a5d1cd7989ada2d1cb32f97d84360e050f", "refsource": "MISC", "url": "https://github.com/vim/vim/commit/9f1a39a5d1cd7989ada2d1cb32f97d84360e050f" }, { "refsource": "FEDORA", "name": "FEDORA-2022-20e66c6698", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/" }, { "refsource": "MLIST", "name": "[oss-security] 20220114 Re: 3 new CVE's in vim", "url": "http://www.openwall.com/lists/oss-security/2022/01/15/1" }, { "refsource": "FEDORA", "name": "FEDORA-2022-48b86d586f", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT213183", "url": "https://support.apple.com/kb/HT213183" }, { "refsource": "FULLDISC", "name": "20220314 APPLE-SA-2022-03-14-4 macOS Monterey 12.3", "url": "http://seclists.org/fulldisclosure/2022/Mar/29" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT213344", "url": "https://support.apple.com/kb/HT213344" }, { "refsource": "FULLDISC", "name": "20220721 APPLE-SA-2022-07-20-3 macOS Big Sur 11.6.8", "url": "http://seclists.org/fulldisclosure/2022/Jul/13" }, { "refsource": "GENTOO", "name": "GLSA-202208-32", "url": "https://security.gentoo.org/glsa/202208-32" } ] }, "source": { "advisory": "47dded34-3767-4725-8c7c-9dcb68c70b36", "discovery": "EXTERNAL" } }