CVE-2022-0696 — NULL Pointer Dereference in VIM

CWE-476 — NULL Pointer Dereference10 documents10 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 64.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
VIM VIMVIMApple Macos+2 more
Timeline
PublishedFeb 21
Latest updateJul 3

Description

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDvim/vim< 8.2.4428
▶CVEListV5vim/vim_vimunspecified — 8.2.4428
▶NVDapple/macos< 13.0
▶Debianvim/vim< 2:8.2.4659-1+2

Also affects: Debian Linux 10.0, Fedora 34

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-g3r8-4wh4-cpp2: NULL Pointer Dereference in Conda vim prior to 8↗2022-02-22
▶
OSV
CVE-2022-0696: NULL Pointer Dereference in GitHub repository vim/vim prior to 8↗2022-02-21
▶
CVEList
NULL Pointer Dereference in vim/vim↗2022-02-21
▶

📋Vendor Advisories

6
Ubuntu
Vim vulnerabilities↗2023-07-03
▶
Chrome
Stable Channel Update for Desktop: CVE-2023-0696↗2023-02-07
▶
Apple
CVE-2022-0696: macOS Ventura 13↗2022-10-24
▶
Red Hat
vim: NULL Pointer Dereference in vim prior to 8.2↗2022-02-21
▶
Microsoft
NULL Pointer Dereference in vim/vim↗2022-02-08
▶
CVE-2022-0696 — NULL Pointer Dereference in VIM VIM | cvebase