Out-of-bounds read in Vim - CVE-2022-1769

Vulnerability identifier: #VU63647

CSH Severity: Medium

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-1769

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in get_one_sourceline() function. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Vim
Amazon Linux AMI
Gentoo Linux
Fedora
macOS
vim
app-editors/gvim
app-editors/vim
app-editors/vim-core

Install updates from vendor's website.

Vim - update to 8.2.4975
vim - addressed in versions 8.2.4975-1.fc34, 8.2.4975-1.fc35, 8.2.4975-1.fc36
vim - addressed in versions 8.2.5172-1.1, 9.0.1160-1.1
app-editors/gvim - addressed in versions 9.0.0060, 9.0.1157
app-editors/vim - addressed in versions 9.0.0060, 9.0.1157
app-editors/vim-core - addressed in versions 9.0.0060, 9.0.1157
macOS - update to 13.0 22A380

• https://huntr.dev/bounties/522076b2-96cb-4df6-a504-e6e2f64c171c
• https://github.com/vim/vim/commit/4748c4bd64610cf943a431d215bb1aad51f8d0b4
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFAZTAT5CZC2R6KYDYA2HBAVEDSIX6MW/

• Information disclosure in Vim
• Amazon Linux AMI update for vim
• Gentoo update for Vim, gVim
• Multiple vulnerabilities in Apple macOS Ventura
• Gentoo update for Vim, gVim
• Amazon Linux AMI update for vim
• Fedora 36 update for vim
• Fedora 35 update for vim
• Fedora 34 update for vim