Bug 1194553 (CVE-2022-0158)

Summary:	VUL-0: CVE-2022-0158: vim: vim is vulnerable to Heap-based Buffer Overflow
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Carlos López <carlos.lopez>
Component:	Incidents	Assignee:	Zoltan Balogh <zbalogh>
Status:	RESOLVED INVALID	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P5 - None	CC:	mimi.vx, smash_bz
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/319927/
Whiteboard:
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Carlos López 2022-01-11 15:50:05 UTC

CVE-2022-0158

vim is vulnerable to Heap-based Buffer Overflow

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0158
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0158
https://github.com/vim/vim/commit/5f25c3855071bd7e26255c68bf458b1b5cf92f39
https://huntr.dev/bounties/ac5d7005-07c6-4a0a-b251-ba9cdbf6738b

Comment 1 Carlos López 2022-01-11 15:50:41 UTC

No codestreams affected, closing.