Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
Описание
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: Out-of-bounds Write (CVE-2022-1785)
* vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897)
* vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* vim: Out-of-bounds Write (CVE-2022-1785)
* vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897)
* vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Как исправить
Используйте рекомендации производителя, доступные по ссылке https://access.redhat.com/knowledge/articles/11258
Ссылки
Источник: CVE
Наименование: CVE-2022-1785
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1785
Источник: CVE
Наименование: CVE-2022-1897
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1897
Источник: CVE
Наименование: CVE-2022-1927
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927
https://access.redhat.com/errata/RHSA-2022:5813
Наименование: CVE-2022-1785
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1785
Источник: CVE
Наименование: CVE-2022-1897
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1897
Источник: CVE
Наименование: CVE-2022-1927
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927
https://access.redhat.com/errata/RHSA-2022:5813
