First published: Tue Jan 18 2022(Updated: )
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Credit: CVE-2022-0261 CVE-2022-0318 CVE-2022-0319 CVE-2022-0351 CVE-2022-0359 CVE-2022-0361 CVE-2022-0368 CVE-2022-0392 security@huntr.dev security@huntr.dev
Affected Software | Affected Version | How to fix |
---|---|---|
Vim Vim | <8.2.4120 | |
Debian Debian Linux | =9.0 | |
Debian Debian Linux | =10.0 | |
Apple Mac OS X | =10.12.6 | |
Apple macOS | <13.0 | |
Apple macOS Monterey | <12.6 | 12.6 |
<13 | 13 | |
debian/vim | <=2:8.2.2434-3+deb11u1 | 2:9.0.1378-2 2:9.1.0777-1 2:9.1.0861-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID is CVE-2022-0261.
The affected software includes macOS Monterey version up to exclusive 12.6, Ubuntu vim packages up to exclusive 2:8.2.3995-1ubuntu2.7, Ubuntu vim packages up to exclusive 8.2.4120, Ubuntu vim packages up to exclusive 2:7.4.1689-3ubuntu1.5+, Ubuntu vim packages up to exclusive 2:8.0.1453-1ubuntu1.13, Ubuntu vim packages up to exclusive 2:8.1.2269-1ubuntu5.14, macOS Ventura version up to exclusive 13, and Debian vim packages up to inclusive 2:8.2.2434-3+deb11u1.
The vulnerability was addressed with improved input validation.
The severity of CVE-2022-0261 is not provided in the information available.
You can find more information about CVE-2022-0261 at the following references: [Apple Support](https://support.apple.com/en-us/HT213444), [Huntr](https://huntr.dev/bounties/fa795954-8775-4f23-98c6-d4d4d3fe8a82), [GitHub Commit](https://github.com/vim/vim/commit/9f8c304c8a390ade133bac29963dc8e56ab14cbc).