[Git][security-tracker-team/security-tracker][master] Add CVE-2022-2343/vim

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
31eddf85 by Salvatore Bonaccorso at 2022-07-08T22:15:40+02:00
Add CVE-2022-2343/vim

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -252,7 +252,10 @@ CVE-2020-36555
 CVE-2020-36554
 	RESERVED
 CVE-2022-2343 (Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...)
-	TODO: check
+	- vim <unfixed> (unimportant)
+	NOTE: https://huntr.dev/bounties/2ecb4345-2fc7-4e7f-adb0-83a20bb458f5
+	NOTE: https://github.com/vim/vim/commit/caea66442d86e7bbba3bf3dc202c3c0d549b9853 (v9.0.0045)
+	NOTE: Crash in CLI tool, no security impact
 CVE-2022-2342 (Cross-site Scripting (XSS) - Stored in GitHub repository outline/outli ...)
 	TODO: check
 CVE-2022-2341



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31eddf855fd4412c341a343d02ee92146ecb35db

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31eddf855fd4412c341a343d02ee92146ecb35db
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220708/beeea156/attachment.htm>