NULL pointer dereference in Vim - CVE-2022-1725

Vulnerability identifier: #VU66151

CSH Severity: Medium

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-1725

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trick the victim to open a specially crafted file and perform a denial of service (DoS) attack.

Vim
Amazon Linux AMI
Gentoo Linux
Ubuntu
openEuler
macOS
vim-gtk3 (Ubuntu package)
vim-athena (Ubuntu package)
vim (Ubuntu package)
vim-nox (Ubuntu package)
vim-tiny (Ubuntu package)
xxd (Ubuntu package)
vim-gtk (Ubuntu package)
vim-gnome-py2 (Ubuntu package)
vim-gtk-py2 (Ubuntu package)
vim-gtk3-py2 (Ubuntu package)
vim-athena-py2 (Ubuntu package)
vim-gnome (Ubuntu package)
vim-nox-py2 (Ubuntu package)
vim-debuginfo
vim-common
vim-X11
vim
vim-enhanced
vim-filesystem
vim-debugsource
vim-minimal
app-editors/vim-core
app-editors/vim
app-editors/gvim
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data

Install updates from vendor's website.

Vim - update to 8.2.4959
vim-gtk3 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.21, 2:8.2.3995-1ubuntu2.15, 2:9.0.1000-4ubuntu3.3, 2:9.0.1672-1ubuntu2.2
vim-athena (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.21, 2:8.2.3995-1ubuntu2.15, 2:9.0.1000-4ubuntu3.3, 2:9.0.1672-1ubuntu2.2
vim (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.21, 2:8.2.3995-1ubuntu2.15, 2:9.0.1000-4ubuntu3.3, 2:9.0.1672-1ubuntu2.2
vim-nox (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.21, 2:8.2.3995-1ubuntu2.15, 2:9.0.1000-4ubuntu3.3, 2:9.0.1672-1ubuntu2.2
vim-tiny (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.21, 2:8.2.3995-1ubuntu2.15, 2:9.0.1000-4ubuntu3.3, 2:9.0.1672-1ubuntu2.2
xxd (Ubuntu package) - addressed in versions Ubuntu Pro, 2:8.1.2269-1ubuntu5.21, 2:8.2.3995-1ubuntu2.15, 2:9.0.1000-4ubuntu3.3, 2:9.0.1672-1ubuntu2.2
vim-gtk (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.21, 2:8.2.3995-1ubuntu2.15
vim-gnome-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-gtk-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-gtk3-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-athena-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-gnome (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-nox-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
vim-debuginfo - update to 8.2-50
vim-common - update to 8.2-50
vim-X11 - update to 8.2-50
vim - update to 8.2-50
vim-enhanced - update to 8.2-50
vim-filesystem - update to 8.2-50
vim-debugsource - update to 8.2-50
vim-minimal - update to 8.2-50
vim - addressed in versions 8.2.5172-1.1, 9.0.1160-1.1
app-editors/vim-core - update to 9.0.1157
app-editors/vim - update to 9.0.1157
app-editors/gvim - update to 9.0.1157
macOS - update to 13.0 22A380

• https://github.com/vim/vim/commit/b62dc5e7825bc195efe3041d5b3a9f1528359e1c
• https://huntr.dev/bounties/4363cf07-233e-4d0a-a1d5-c731a400525c

• NULL pointer dereference in Vim
• Amazon Linux AMI update for vim
• Multiple vulnerabilities in Apple macOS Ventura
• Ubuntu update for vim
• Gentoo update for Vim, gVim
• Ubuntu update for vim
• openEuler update for vim
• Amazon Linux AMI update for vim
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data