Use of out-of-range pointer offset in Vim - CVE-2022-0554

Vulnerability identifier: #VU60777

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-0554

CWE-ID: CWE-823

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary error when reading files. A remote attacker can trick the victim to open a specially crafted file and crash the application.

Vim
Amazon Linux AMI
Gentoo Linux
Red Hat Enterprise Linux for x86_64
Oracle Linux
Ubuntu
openEuler
Fedora
macOS
Isolation Segment
VMware Tanzu Application Service for VMs
vim (Ubuntu package)
vim-filesystem
vim-common
vim-minimal
vim-debugsource
vim-enhanced
vim
vim-debuginfo
vim-X11
vim (Red Hat package)
app-editors/vim-core
app-editors/vim
app-editors/gvim
VMware Tanzu Operations Manager

Install updates from vendor's website.

Vim - update to 8.2.4327
vim (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:7.4.16893ubuntu1.5+esm6, 2:8.0.1453-1ubuntu1.13, 2:8.1.2269-1ubuntu5.14, 2:8.2.3995-1ubuntu2.7
VMware Tanzu Operations Manager - update to 3.0.8
vim-filesystem - update to 8.2-20
vim-common - update to 8.2-20
vim-minimal - update to 8.2-20
vim-debugsource - update to 8.2-20
vim-enhanced - update to 8.2-20
vim - update to 8.2-20
vim-debuginfo - update to 8.2-20
vim-X11 - update to 8.2-20
vim (Red Hat package) - update to 8.2.2637-16.el9_0.2
vim - update to 8.2.4460-1.fc34
app-editors/vim-core - update to 9.0.0060
app-editors/vim - update to 9.0.0060
app-editors/gvim - update to 9.0.0060
vim - update to 9.0.1160-1.1
macOS - update to 13.0 22A380

• https://github.com/vim/vim/commit/e3537aec2f8d6470010547af28dcbd83d41461b8
• https://huntr.dev/bounties/7e8f6cd0-b5ee-48a2-8255-6a86f4c46c71

• Multiple vulnerabilities in Vim
• Amazon Linux AMI update for vim
• Ubuntu update for vim
• Red Hat Enterprise Linux 9 update for vim
• Multiple vulnerabilities in Oracle Linux
• Gentoo update for Vim, gVim
• Multiple vulnerabilities in Apple macOS Ventura
• Ubuntu update for vim
• VMware Tanzu products update for Vim
• openEuler update for vim
• Amazon Linux AMI update for vim
• Fedora 34 update for vim