pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
8a40c6ee37
vuln-list-alt/oval/c9f2/ALT-PU-2022-2272/definitions.json
pepelyaevip 0707cb759b ALT Vulnerability
2024-04-16 14:26:14 +00:00

509 lines
22 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20222272",
"Version": "oval:org.altlinux.errata:def:20222272",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2022-2272: package `vim` update to version 8.2.5172-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c9f2"
],
"Products": [
"ALT SPWorkstation",
"ALT SPServer"
]
}
],
"References": [
{
"RefID": "ALT-PU-2022-2272",
"RefURL": "https://errata.altlinux.org/ALT-PU-2022-2272",
"Source": "ALTPU"
},
{
"RefID": "BDU:2022-04025",
"RefURL": "https://bdu.fstec.ru/vul/2022-04025",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04208",
"RefURL": "https://bdu.fstec.ru/vul/2022-04208",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04209",
"RefURL": "https://bdu.fstec.ru/vul/2022-04209",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04214",
"RefURL": "https://bdu.fstec.ru/vul/2022-04214",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04215",
"RefURL": "https://bdu.fstec.ru/vul/2022-04215",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04216",
"RefURL": "https://bdu.fstec.ru/vul/2022-04216",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04219",
"RefURL": "https://bdu.fstec.ru/vul/2022-04219",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04220",
"RefURL": "https://bdu.fstec.ru/vul/2022-04220",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04221",
"RefURL": "https://bdu.fstec.ru/vul/2022-04221",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04222",
"RefURL": "https://bdu.fstec.ru/vul/2022-04222",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04223",
"RefURL": "https://bdu.fstec.ru/vul/2022-04223",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04226",
"RefURL": "https://bdu.fstec.ru/vul/2022-04226",
"Source": "BDU"
},
{
"RefID": "BDU:2022-04572",
"RefURL": "https://bdu.fstec.ru/vul/2022-04572",
"Source": "BDU"
},
{
"RefID": "BDU:2022-06480",
"RefURL": "https://bdu.fstec.ru/vul/2022-06480",
"Source": "BDU"
},
{
"RefID": "CVE-2022-2000",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2000",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2042",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2042",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2124",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2124",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2125",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2125",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2126",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2126",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2129",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2129",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2175",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2175",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2182",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2182",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2183",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2183",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2206",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2206",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2207",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2207",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2208",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2208",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2210",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2210",
"Source": "CVE"
},
{
"RefID": "CVE-2022-2231",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-2231",
"Source": "CVE"
}
],
"Description": "This update upgrades vim to version 8.2.5172-alt1. \nSecurity Fix(es):\n\n * BDU:2022-04025: Уязвимость функции skipwhite текстового редактора Vim, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2022-04208: Уязвимость функции skipwhite() текстового редактора Vim, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2022-04209: Уязвимость компонента diff.c текстового редактора Vim, позволяющая нарушителю выполнить атаку типа «отказ в обслуживании» (DoS)\n\n * BDU:2022-04214: Уязвимость функции ins_bs() текстового редактора Vim, позволяющая нарушителю выполнить произвольный код в целевой системе\n\n * BDU:2022-04215: Уязвимость функции get_lisp_indent() текстового редактора Vim, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * BDU:2022-04216: Уязвимость функции parse_cmd_address() текстового редактора Vim, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2022-04219: Уязвимость функции ml_append_int() текстового редактора Vim, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2022-04220: Уязвимость функции suggest_trie_walk() текстового редактора Vim, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или оказать другое воздействие\n\n * BDU:2022-04221: Уязвимость функции get_lisp_indent() текстового редактора Vim, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2022-04222: Уязвимость функции current_quote() текстового редактора Vim, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2022-04223: Уязвимость функции append_command() (ex_docmd.c) текстового редактора Vim, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2022-04226: Уязвимость функции cmdline_insert_reg() текстового редактора Vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность, доступность защищаемой информации\n\n * BDU:2022-04572: Уязвимость компонента edit.c текстового редактора Vim, позволяющая нарушителю выполнить произвольный код в целевой системе\n\n * BDU:2022-06480: Уязвимость функции vim_regsub_both компонента regexp.c текстового редактора Vim, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании\n\n * CVE-2022-2000: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2042: Use After Free in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2124: Buffer Over-read in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2125: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2126: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2129: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2175: Buffer Over-read in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2182: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2183: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2206: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2207: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2208: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.\n\n * CVE-2022-2210: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.\n\n * CVE-2022-2231: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2022-07-19"
},
"Updated": {
"Date": "2022-07-19"
},
"BDUs": [
{
"ID": "BDU:2022-04025",
"CVSS": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-476",
"Href": "https://bdu.fstec.ru/vul/2022-04025",
"Impact": "High",
"Public": "20220628"
},
{
"ID": "BDU:2022-04208",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-416",
"Href": "https://bdu.fstec.ru/vul/2022-04208",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "BDU:2022-04209",
"CVSS": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"CWE": "CWE-476",
"Href": "https://bdu.fstec.ru/vul/2022-04209",
"Impact": "Low",
"Public": "20220627"
},
{
"ID": "BDU:2022-04214",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-122",
"Href": "https://bdu.fstec.ru/vul/2022-04214",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "BDU:2022-04215",
"CVSS": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"CWE": "CWE-125",
"Href": "https://bdu.fstec.ru/vul/2022-04215",
"Impact": "Low",
"Public": "20220627"
},
{
"ID": "BDU:2022-04216",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-122",
"Href": "https://bdu.fstec.ru/vul/2022-04216",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "BDU:2022-04219",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-787",
"Href": "https://bdu.fstec.ru/vul/2022-04219",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "BDU:2022-04220",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-125",
"Href": "https://bdu.fstec.ru/vul/2022-04220",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "BDU:2022-04221",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-122",
"Href": "https://bdu.fstec.ru/vul/2022-04221",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "BDU:2022-04222",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-125",
"Href": "https://bdu.fstec.ru/vul/2022-04222",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "BDU:2022-04223",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-787",
"Href": "https://bdu.fstec.ru/vul/2022-04223",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "BDU:2022-04226",
"CVSS": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"CWE": "CWE-125",
"Href": "https://bdu.fstec.ru/vul/2022-04226",
"Impact": "Low",
"Public": "20220627"
},
{
"ID": "BDU:2022-04572",
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-125",
"Href": "https://bdu.fstec.ru/vul/2022-04572",
"Impact": "High",
"Public": "20220626"
},
{
"ID": "BDU:2022-06480",
"CVSS": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-787",
"Href": "https://bdu.fstec.ru/vul/2022-06480",
"Impact": "High",
"Public": "20220616"
}
],
"CVEs": [
{
"ID": "CVE-2022-2000",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-787",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2000",
"Impact": "High",
"Public": "20220609"
},
{
"ID": "CVE-2022-2042",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-416",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2042",
"Impact": "High",
"Public": "20220610"
},
{
"ID": "CVE-2022-2124",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-126",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2124",
"Impact": "High",
"Public": "20220619"
},
{
"ID": "CVE-2022-2125",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-122",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2125",
"Impact": "High",
"Public": "20220619"
},
{
"ID": "CVE-2022-2126",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2126",
"Impact": "High",
"Public": "20220619"
},
{
"ID": "CVE-2022-2129",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-787",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2129",
"Impact": "High",
"Public": "20220619"
},
{
"ID": "CVE-2022-2175",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2175",
"Impact": "High",
"Public": "20220623"
},
{
"ID": "CVE-2022-2182",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-122",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2182",
"Impact": "High",
"Public": "20220623"
},
{
"ID": "CVE-2022-2183",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2183",
"Impact": "High",
"Public": "20220623"
},
{
"ID": "CVE-2022-2206",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2206",
"Impact": "High",
"Public": "20220626"
},
{
"ID": "CVE-2022-2207",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-122",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2207",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "CVE-2022-2208",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"CWE": "CWE-476",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2208",
"Impact": "Low",
"Public": "20220627"
},
{
"ID": "CVE-2022-2210",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-787",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2210",
"Impact": "High",
"Public": "20220627"
},
{
"ID": "CVE-2022-2231",
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"CWE": "CWE-476",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-2231",
"Impact": "Low",
"Public": "20220628"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:8.4",
"cpe:/o:alt:spserver:8.4"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20222272001",
"Comment": "rpm-build-vim is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272002",
"Comment": "vim-X11 is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272003",
"Comment": "vim-X11-gnome2 is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272004",
"Comment": "vim-X11-gtk2 is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272005",
"Comment": "vim-X11-gtk3 is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272006",
"Comment": "vim-common is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272007",
"Comment": "vim-console is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272008",
"Comment": "vim-enhanced is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272009",
"Comment": "vim-minimal is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272010",
"Comment": "vim-spell-source is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272011",
"Comment": "vimtutor is earlier than 4:8.2.5172-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20222272012",
"Comment": "xxd is earlier than 4:8.2.5172-alt1"
}
]
}
]
}
}
]
}
Reference in New Issue View Git Blame Copy Permalink