CVE-2022-1771: Uncontrolled Recursion in vim/vim
Last updated 24 July 2024
Other sources
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0135-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 8.2.4975
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1771?
CVE-2022-1771 has been classified as a medium severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2022-1771?
To fix CVE-2022-1771, upgrade to Vim version 8.2.4975 or later.
Which versions of Vim are affected by CVE-2022-1771?
CVE-2022-1771 affects all versions of Vim prior to 8.2.4975.
Is CVE-2022-1771 present in Debian packages?
Yes, CVE-2022-1771 is present in Debian Vim packages up to version 2:8.2.2434-3+deb11u1.
What is the nature of the vulnerability in CVE-2022-1771?
CVE-2022-1771 is an uncontrolled recursion vulnerability that can lead to a denial of service.