First published: Sun Feb 20 2022(Updated: )
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.
Credit: security@huntr.dev security@huntr.dev
Affected Software | Affected Version | How to fix |
---|---|---|
Vim Vim | <8.2.4418 | |
Fedoraproject Fedora | =34 | |
Debian Debian Linux | =9.0 | |
Debian Debian Linux | =10.0 | |
Apple macOS | <13.0 | |
Apple macOS Ventura | <13 | 13 |
ubuntu/vim | <2:8.0.1453-1ubuntu1.13 | 2:8.0.1453-1ubuntu1.13 |
ubuntu/vim | <2:8.1.2269-1ubuntu5.14 | 2:8.1.2269-1ubuntu5.14 |
ubuntu/vim | <2:8.2.3995-1ubuntu2.7 | 2:8.2.3995-1ubuntu2.7 |
ubuntu/vim | <2:7.4.052-1ubuntu3.1+ | 2:7.4.052-1ubuntu3.1+ |
ubuntu/vim | <8.2.4418 | 8.2.4418 |
ubuntu/vim | <2:7.4.1689-3ubuntu1.5+ | 2:7.4.1689-3ubuntu1.5+ |
debian/vim | <=2:8.1.0875-5+deb10u2<=2:8.2.2434-3+deb11u1 | 2:8.1.0875-5+deb10u6 2:9.0.1378-2 2:9.1.0377-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-0685 is a vulnerability in the Vim text editor that allows for the use of an out-of-range pointer offset.
The severity of CVE-2022-0685 is not specified in the provided information.
To fix CVE-2022-0685, it is recommended to update Vim to version 8.2.4418 or later.
The Vim versions prior to 8.2.4418 are affected by CVE-2022-0685.
You can find more information about CVE-2022-0685 on the following sources: [Huntr](https://huntr.dev/bounties/27230da3-9b1a-4d5d-8cdf-4b1e62fcd782), [GitHub](https://github.com/vim/vim/commit/5921aeb5741fc6e84c870d68c7c35b93ad0c9f87), [Fedora Project](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/).