Use-after-free in Vim - CVE-2022-3256

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU67627

Use-after-free in Vim - CVE-2022-3256

Published: September 24, 2022


Vulnerability identifier: #VU67627
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-3256
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the movemark() function in mark.c. A remote attacker can trick the victim to open a specially crafted file, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


Affected software

Vim
Amazon Linux AMI
Gentoo Linux
Oracle Solaris
Ubuntu
Slackware Linux
openEuler
Fedora
Isolation Segment
VMware Tanzu Application Service for VMs
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Redis for Pivotal Platform
vim-gnome-py2 (Ubuntu package)
vim (Ubuntu package)
xxd (Ubuntu package)
vim-gnome (Ubuntu package)
vim-athena (Ubuntu package)
vim-gtk (Ubuntu package)
vim-tiny (Ubuntu package)
vim-gtk3 (Ubuntu package)
vim-nox (Ubuntu package)
vim-gtk-py2 (Ubuntu package)
vim-gtk3-py2 (Ubuntu package)
vim-athena-py2 (Ubuntu package)
vim-nox-py2 (Ubuntu package)
vim-minimal
vim
vim-debugsource
vim-enhanced
vim-X11
vim-debuginfo
vim-common
vim-filesystem
vim-gvim
app-editors/vim-core
app-editors/vim
app-editors/gvim
Tanzu Greenplum for Kubernetes
VMware Tanzu Operations Manager

How to mitigate CVE-2022-3256

Install updates from vendor's website.

Vim - update to 9.0.0530
vim-gnome-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
xxd (Ubuntu package) - addressed in versions Ubuntu Pro, 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-gnome (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-athena (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-gtk (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-tiny (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-gtk3 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-nox (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-gtk-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-gtk3-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-athena-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
vim-nox-py2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
Tanzu Greenplum for Kubernetes - update to 2.0.0
VMware Tanzu Operations Manager - addressed in versions 2.10.52, 3.0.17
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
vim-minimal - update to 8.2-58
vim - update to 8.2-58
vim-debugsource - update to 8.2-58
vim-enhanced - update to 8.2-58
vim-X11 - update to 8.2-58
vim-debuginfo - update to 8.2-58
vim-common - update to 8.2-58
vim-filesystem - update to 8.2-58
vim-gvim - update to 9.0.0558
vim - update to 9.0.0558
vim - addressed in versions 9.0.720-1.fc35, 9.0.720-1.fc36, 9.0.720-1.fc37, 9.0.803-1.fc37, 9.0.828-1.fc37
app-editors/vim-core - update to 9.0.1157
app-editors/vim - update to 9.0.1157
app-editors/gvim - update to 9.0.1157
vim - addressed in versions 9.0.1314-1, 9.0.1403-1.76

External References

Related Security Bulletins