CVE-2022-1771 - Uncontrolled Recursion in vim/vim

MEDIUM

Uncontrolled Recursion in vim/vim

Published May 18, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 1.21%

Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<8.2.4975

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	vim	Not affected	n/a
Red Hat Enterprise Linux 7	vim	Not affected	n/a
Red Hat Enterprise Linux 8	vim	Not affected	n/a
Red Hat Enterprise Linux 9	vim	Not affected	n/a
Red Hat Virtualization 4	vim	Not affected	n/a

Red Hat mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-674

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-1771		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2088241		Issue Tracking
https://github.com/vim/vim/commit/51f0bfb88a3554ca2dde777d78a59880d1ee37a8		PatchThird Party Advisory
https://huntr.dev/bounties/faa74175-5317-4b71-a363-dfc39094ecbb		ExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-1771
https://security.gentoo.org/glsa/202208-32		vendor-advisoryThird Party Advisory
https://security.gentoo.org/glsa/202305-16		vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2022-1771