CVE-2022-2923

一、漏洞信息
漏洞编号：CVE-2022-2923
漏洞归属组件：vim
漏洞归属的版本：8.2,9.0
CVSS V3.0分值：
BaseScore：5.5 Medium
Vector：CVSS：3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
漏洞简述：
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.
漏洞公开时间：2022-08-23 05:15:00
漏洞创建时间：2022-08-22 09:26:00
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2022-2923

更多参考(点击展开)

参考来源	参考链接	来源链接
nvd	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2
nvd	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e
nvd	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/
redhat	https://access.redhat.com/security/cve/CVE-2022-2923
suse_bugzilla	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-2923	https://bugzilla.suse.com/show_bug.cgi?id=1202687
suse_bugzilla	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2923	https://bugzilla.suse.com/show_bug.cgi?id=1202687
suse_bugzilla	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e	https://bugzilla.suse.com/show_bug.cgi?id=1202687
suse_bugzilla	https://www.cve.org/CVERecord?id=CVE-2022-2923	https://bugzilla.suse.com/show_bug.cgi?id=1202687
suse_bugzilla	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2	https://bugzilla.suse.com/show_bug.cgi?id=1202687
redhat_bugzilla	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2	https://bugzilla.redhat.com/show_bug.cgi?id=2120989
redhat_bugzilla	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e	https://bugzilla.redhat.com/show_bug.cgi?id=2120989
ubuntu	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2923	https://ubuntu.com/security/CVE-2022-2923
ubuntu	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2	https://ubuntu.com/security/CVE-2022-2923
ubuntu	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e (v9.0.0240)	https://ubuntu.com/security/CVE-2022-2923
ubuntu	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e	https://ubuntu.com/security/CVE-2022-2923
ubuntu	https://nvd.nist.gov/vuln/detail/CVE-2022-2923	https://ubuntu.com/security/CVE-2022-2923
ubuntu	https://launchpad.net/bugs/cve/CVE-2022-2923	https://ubuntu.com/security/CVE-2022-2923
ubuntu	https://security-tracker.debian.org/tracker/CVE-2022-2923	https://ubuntu.com/security/CVE-2022-2923
debian		https://security-tracker.debian.org/tracker/CVE-2022-2923
huntr		https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2/
cve_search		https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2
cve_search		https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e
cve_search		https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/
mageia		http://advisories.mageia.org/MGASA-2022-0430.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2257.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2264.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2284.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2285.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2286.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2287.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2288.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2289.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2304.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2343.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2344.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2345.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2816.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2817.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2819.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-3037.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
suse_bugzilla	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-2923
suse_bugzilla	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2923
suse_bugzilla	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e
suse_bugzilla	https://www.cve.org/CVERecord?id=CVE-2022-2923
suse_bugzilla	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2
redhat_bugzilla	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2
redhat_bugzilla	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e
redhat_bugzilla	https://bugzilla.redhat.com/show_bug.cgi?id=2120989
ubuntu	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2923
ubuntu	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2
ubuntu	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e (v9.0.0240)
ubuntu	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e
ubuntu	https://nvd.nist.gov/vuln/detail/CVE-2022-2923
ubuntu	https://launchpad.net/bugs/cve/CVE-2022-2923
ubuntu	https://security-tracker.debian.org/tracker/CVE-2022-2923
debian	https://security-tracker.debian.org/tracker/CVE-2022-2923
huntr	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2/
nvd	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/
nvd	https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2
nvd	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e
	https://www.github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e

漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：

详情(点击展开)

影响的包	修复补丁	来源
	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e	nvd
	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e	suse_bugzilla
	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e	redhat_bugzilla
	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e (v9.0.0240)	ubuntu
	https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e	ubuntu
vim	https://www.github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e	huntr
	https://www.github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e

二、漏洞分析结构反馈
影响性分析说明：
vim-9.0.0240 之前版本中存在代码问题漏洞，该漏洞源于 NULL 指针取消引用，攻击者可以通过精心设计的输入导致拒绝服务。
openEuler评分：
5.5
Vector：CVSS：3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
受影响版本排查(受影响/不受影响)：
1.openEuler-20.03-LTS-SP1(9.0):受影响
2.openEuler-20.03-LTS-SP3(9.0):受影响
3.openEuler-22.03-LTS(9.0):受影响
4.openEuler-22.09(9.0):受影响

修复是否涉及abi变化(是/否)：
1.openEuler-20.03-LTS-SP1(9.0):否
2.openEuler-20.03-LTS-SP3(9.0):否
3.openEuler-22.03-LTS(9.0):否
4.openEuler-22.09(9.0):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2022-1882

@zhujianwei001 ,@hexiaowen ,@谢志鹏 ,@Monday ,@Lv Ying ,@znzjugod ,@陈子扬 ,@HuBin95 ,@gaoruoshu
issue处理注意事项:
1. 当前issue受影响的分支提交pr时, 须在pr描述中填写当前issue编号进行关联, 否则无法关闭当前issue;
2. 模板内容需要填写完整, 无论是受影响或者不受影响都需要填写完整内容,未引入的分支不需要填写, 否则无法关闭当前issue;
3. 以下为模板中需要填写完整的内容, 请复制到评论区回复, 注: 内容的标题名称(影响性分析说明, openEuler评分, 受影响版本排查(受影响/不受影响), 修复是否涉及abi变化(是/否))不能省略,省略后cve-manager将无法正常解析填写内容.

影响性分析说明:

openEuler评分: (评分和向量)

受影响版本排查(受影响/不受影响):
1.openEuler-20.03-LTS-SP1(8.2):
2.openEuler-20.03-LTS-SP3(8.2):
3.openEuler-22.03-LTS:
4.openEuler-22.09:

修复是否涉及abi变化(是/否)：
1.openEuler-20.03-LTS-SP1(8.2):
2.openEuler-20.03-LTS-SP3(8.2):
3.openEuler-22.03-LTS:
4.openEuler-22.09:

issue处理具体操作请参考:
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
pr关联issue具体操作请参考:
https://gitee.com/help/articles/4142

Hi openeuler-ci-bot, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: Base-service, and any of the maintainers: @zhujianwei001 , @hexiaowen , @谢志鹏 , @Monday , @Lv Ying , @znzjugod , @陈子扬 , @HuBin95 , @gaoruoshu

参考网址	关联pr	状态	补丁链接
https://ubuntu.com/security/CVE-2022-2923
http://www.cnnvd.org.cn/web/vulnerability/queryLds.tag?qcvCnnvdid=CVE-2022-2923	https://github.com/Shopify/hydrogen/pull/1272	closed	https://github.com/Shopify/hydrogen/commit/ed403590bcd1df9ead8ebf1813729e50cebede78 https://github.com/Shopify/hydrogen/commit/e1d28e2228f1de5b7e76488c9bbe378e2f34dd20 https://github.com/Shopify/hydrogen/commit/eb695ccb1469dab201bada547d8c3a4e5c8625d7 https://github.com/Shopify/hydrogen/commit/51e966f70ebdc1eb29c3c1e7c0eba21a05bc6d67 https://github.com/Shopify/hydrogen/commit/024d1711e4e4ccbd6f12dd4f79f8a4c09a8c700d https://github.com/Shopify/hydrogen/commit/2980d09d19501a69eba28fd74be94459e1521d81 https://github.com/Shopify/hydrogen/commit/6c9bdc4f36a35a73cdc10f715cfe106680b4936f https://github.com/Shopify/hydrogen/commit/57fdb11182d238e31bac8db7150296e5deef79e2 https://github.com/Shopify/hydrogen/commit/4c038ee5a4f6ea5ff48f99e13e6c86fe6de39ffe https://github.com/Shopify/hydrogen/commit/2c92ed0aac9b50202abc2079b6e4714ef30727a0 https://github.com/Shopify/hydrogen/commit/30908e0071315de051916b12e8ea425c76fccb87 https://github.com/Shopify/hydrogen/commit/38d094d01edea3cfcac2723833dec3b7917a3e84 https://github.com/Shopify/hydrogen/commit/526b95078dc994e7bf2e299d2d2ae7906f5e5430 https://github.com/Shopify/hydrogen/commit/aaee73853ad233707969cd2c1b448238743e87fc https://github.com/Shopify/hydrogen/commit/033a0588b79db2c004c2eb0fb65f3026747d767b
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-2923
https://www.opencve.io/cve/CVE-2022-2923
https://nvd.nist.gov/vuln/detail/CVE-2022-2923
https://security-tracker.debian.org/tracker/CVE-2022-2923

说明：补丁链接仅供初步排查参考，实际可用性请人工再次确认，补丁下载验证可使用CVE补丁工具。
若补丁不准确，烦请在此issue下评论 '/report-patch 参考网址补丁链接1,补丁链接2' 反馈正确信息，便于我们不断优化工具，不胜感激。
如 /report-patch https://security-tracker.debian.org/tracker/CVE-2021-3997 https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1

CVE详情：
https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2/

问题在vim-8.2和vim-9.0中都可以复现：
9.0:
输入图片说明
8.2:

修复补丁：
https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e

影响性分析说明:vim-9.0.0240 之前版本中存在代码问题漏洞，该漏洞源于 NULL 指针取消引用，攻击者可以通过精心设计的输入导致拒绝服务。

openEuler评分: (评分和向量)
6.6
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

受影响版本排查(受影响/不受影响):
1.openEuler-20.03-LTS-SP1(8.2):受影响
2.openEuler-20.03-LTS-SP3(8.2):受影响
3.openEuler-22.03-LTS:受影响
4.openEuler-22.09:受影响

修复是否涉及abi变化(是/否)：
1.openEuler-20.03-LTS-SP1(8.2):否
2.openEuler-20.03-LTS-SP3(8.2):否
3.openEuler-22.03-LTS:否
4.openEuler-22.09:否

@桐小哥经过 cve-manager 解析, 已分析的内容如下表所示:

状态	需分析	内容
已分析	1.影响性分析说明	vim-9.0.0240 之前版本中存在代码问题漏洞，该漏洞源于 NULL 指针取消引用，攻击者可以通过精心设计的输入导致拒绝服务。
已分析	2.openEulerScore	6.6
已分析	2.openEulerVector	AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
已分析	3.受影响版本排查	openEuler-20.03-LTS-SP1:受影响,openEuler-20.03-LTS-SP3:受影响,openEuler-22.03-LTS:受影响,openEuler-22.09:受影响
已分析	4.修复是否涉及abi变化	openEuler-20.03-LTS-SP1:否,openEuler-20.03-LTS-SP3:否,openEuler-22.03-LTS:否,openEuler-22.09:否

请确认分析内容的准确性, 确认无误后, 您可以进行后续步骤, 否则您可以继续分析.

输入图片说明
NVD暂无评分，采用huntr.dev的评分。

@liujingang09 ,@yanxiaobing2020 ,@zhujianwei001 ,@gwei3 ,@mdche 经过 cve-manager 解析 openEuler评分已改变需要您及时进行审核,以便maintainer进行后续操作.

openEuler评分：
5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

@桐小哥经过 cve-manager 解析, 已分析的内容如下表所示:

状态	需分析	内容
已分析	1.影响性分析说明	vim-9.0.0240 之前版本中存在代码问题漏洞，该漏洞源于 NULL 指针取消引用，攻击者可以通过精心设计的输入导致拒绝服务。
已分析	2.openEulerScore	5.5
已分析	2.openEulerVector	AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
已分析	3.受影响版本排查	openEuler-20.03-LTS-SP1:受影响,openEuler-20.03-LTS-SP3:受影响,openEuler-22.03-LTS:受影响,openEuler-22.09:受影响
已分析	4.修复是否涉及abi变化	openEuler-20.03-LTS-SP1:否,openEuler-20.03-LTS-SP3:否,openEuler-22.03-LTS:否,openEuler-22.09:否

请确认分析内容的准确性, 确认无误后, 您可以进行后续步骤, 否则您可以继续分析.

src-openEuler / vim

内容风险标识

评论 (17)

src-openEuler / vim .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2022-2923

评论 (17)

搜索帮助

src-openEuler / vim