First published: Tue Jan 25 2022(Updated: )
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
Credit: security@huntr.dev security@huntr.dev
Affected Software | Affected Version | How to fix |
---|---|---|
Vim Vim | <8.2 | |
Debian Debian Linux | =9.0 | |
Debian Debian Linux | =10.0 | |
Apple macOS | <12.6 | |
Apple macOS Monterey | <12.6 | 12.6 |
<13 | 13 | |
debian/vim | <=2:8.2.2434-3+deb11u1 | 2:9.0.1378-2 2:9.1.0777-1 2:9.1.0861-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-0351 is a vulnerability in the Vim text editor that allows access to a memory location before the start of a buffer.
The affected software versions include macOS Monterey 12.6, Ubuntu Vim 2:8.0.1453-1ubuntu1.13, Ubuntu Vim 2:8.1.2269-1ubuntu5.14, Ubuntu Vim 2:8.2.3995-1ubuntu2.7, Ubuntu Vim 2:7.4.052-1ubuntu3.1+, Ubuntu Vim 8.2.4206, Ubuntu Vim 2:7.4.1689-3ubuntu1.5+, macOS Ventura 13, Debian Vim 2:8.1.0875-5+deb10u5, Debian Vim 2:9.0.1378-2, and Debian Vim 2:9.0.1894-1.
To fix the CVE-2022-0351 vulnerability in Vim, update to the latest version of Vim available for your operating system.
You can find more information about CVE-2022-0351 on the following references: [Apple Support](https://support.apple.com/en-us/HT213444), [Huntr](https://huntr.dev/bounties/8b36db58-b65c-4298-be7f-40b9e37fd161), [GitHub Commit](https://github.com/vim/vim/commit/fe6fb267e6ee5c5da2f41889e4e0e0ac5bf4b89d).
The Common Weakness Enumeration (CWE) ID associated with CVE-2022-0351 is CWE-20.