Use-after-free in Vim - CVE-2022-3705

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU68962

Use-after-free in Vim - CVE-2022-3705

Published: November 3, 2022


Vulnerability identifier: #VU68962
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-3705
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when handling files within the qf_update_buffer() function in quickfix.c. A remote attacker can trick the victim to open a specially crafted file, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


Affected software

Vim
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
EMC Cloud Tiering Appliance
Gentoo Linux
Amazon Linux AMI
SUSE CaaS Platform
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Oracle Solaris
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
macOS
Ubuntu
Slackware Linux
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
openEuler
Fedora
Isolation Segment
VMware Tanzu Application Service for VMs
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
Redis for Pivotal Platform
vim (Ubuntu package)
vim-athena (Ubuntu package)
vim-gtk (Ubuntu package)
vim-gtk3 (Ubuntu package)
vim-nox (Ubuntu package)
vim-tiny (Ubuntu package)
xxd (Ubuntu package)
vim-gnome (Ubuntu package)
vim-debuginfo
vim
vim-debugsource
vim-filesystem
vim-minimal
vim-common
vim-enhanced
vim-X11
vim-gvim
gvim-debuginfo
gvim
vim-data-common
vim-data
vim-small-debuginfo
vim-small
app-editors/vim
app-editors/gvim
app-editors/vim-core
VMware Tanzu Operations Manager
EMC ViPR SRM
Dell EMC Storage Monitoring and Reporting (SMR)
RecoverPoint for VMs
Dell EMC VxRail Appliance
RSA Authentication Manager

How to mitigate CVE-2022-3705

Install updates from vendor's website.

Vim - update to 9.0.0805
macOS - update to 13.2 22D49
vim (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-athena (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-gtk (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-gtk3 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-nox (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-tiny (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
xxd (Ubuntu package) - addressed in versions Ubuntu Pro, 2:8.1.2269-1ubuntu5.18, 2:8.2.3995-1ubuntu2.12
vim-gnome (Ubuntu package) - update to Ubuntu Pro (Infra-only)
VMware Tanzu Operations Manager - update to 3.0.17
EMC ViPR SRM - update to 4.9.0.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
Dell Secure Connect Gateway - update to 5.14.00.16
RecoverPoint for VMs - update to 6.0.SP1.P1
Dell EMC VxRail Appliance - update to 7.0.411
vim-debuginfo - update to 8.2-63
vim - update to 8.2-63
vim-debugsource - update to 8.2-63
vim-filesystem - update to 8.2-63
vim-minimal - update to 8.2-63
vim-common - update to 8.2-63
vim-enhanced - update to 8.2-63
vim-X11 - update to 8.2-63
RSA Authentication Manager - update to 8.7 Patch 3
vim-gvim - update to 9.0.0814
vim - update to 9.0.0814
vim-debugsource - addressed in versions 9.0.0814-17.9.1, 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1, 9.0.1234-17.12.1
vim-debuginfo - addressed in versions 9.0.0814-17.9.1, 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1, 9.0.1234-17.12.1
vim - addressed in versions 9.0.0814-17.9.1, 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1, 9.0.1234-17.12.1
gvim-debuginfo - addressed in versions 9.0.0814-17.9.1, 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1, 9.0.1234-17.12.1
gvim - addressed in versions 9.0.0814-17.9.1, 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1, 9.0.1234-17.12.1
vim-data-common - addressed in versions 9.0.0814-17.9.1, 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1, 9.0.1234-17.12.1
vim-data - addressed in versions 9.0.0814-17.9.1, 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1, 9.0.1234-17.12.1
vim-small-debuginfo - addressed in versions 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1
vim-small - addressed in versions 9.0.0814-150000.5.28.1, 9.0.1040-150000.5.31.1
vim - addressed in versions 9.0.828-1.fc35, 9.0.828-1.fc36, 9.0.828-1.fc37
vim - addressed in versions 9.0.828-1.1, 9.0.1160-1.1
app-editors/vim - update to 9.0.1157
app-editors/gvim - update to 9.0.1157
app-editors/vim-core - update to 9.0.1157
EMC Cloud Tiering Appliance - update to 13.1.0.2.29

External References

Related Security Bulletins