First published: Wed Feb 23 2022(Updated: )
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
Credit: security@huntr.dev security@huntr.dev
Affected Software | Affected Version | How to fix |
---|---|---|
Vim Vim | <8.2.4440 | |
Fedoraproject Fedora | =34 | |
Fedoraproject Fedora | =35 | |
Debian Debian Linux | =9.0 | |
Debian Debian Linux | =10.0 | |
Apple macOS | <13.0 | |
Apple macOS Ventura | <13 | 13 |
ubuntu/vim | <2:8.0.1453-1ubuntu1.13 | 2:8.0.1453-1ubuntu1.13 |
ubuntu/vim | <2:8.1.2269-1ubuntu5.14 | 2:8.1.2269-1ubuntu5.14 |
ubuntu/vim | <2:8.2.3995-1ubuntu2.7 | 2:8.2.3995-1ubuntu2.7 |
ubuntu/vim | <2:7.4.052-1ubuntu3.1+ | 2:7.4.052-1ubuntu3.1+ |
ubuntu/vim | <8.2.4440 | 8.2.4440 |
ubuntu/vim | <2:7.4.1689-3ubuntu1.5+ | 2:7.4.1689-3ubuntu1.5+ |
debian/vim | <=2:8.1.0875-5+deb10u2<=2:8.2.2434-3+deb11u1 | 2:8.1.0875-5+deb10u6 2:9.0.1378-2 2:9.1.0377-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID is CVE-2022-0729.
The affected software includes Ubuntu (bionic, focal, jammy, trusty), Apple macOS Ventura, and Debian.
Vim versions prior to 8.2.4440 are affected.
Update Vim to version 8.2.4440 or later.
Additional information can be found at the following references: [Huntr Bounty](https://huntr.dev/bounties/f3f3d992-7bd6-4ee5-a502-ae0e5f8016ea), [Vim Commit](https://github.com/vim/vim/commit/6456fae9ba8e72c74b2c0c499eaf09974604ff30), [Fedora Package Announcement](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/)