CVE-2022-2182: Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-1
Event History
Frequently Asked Questions
What is CVE-2022-2182?
CVE-2022-2182 is a vulnerability in the GitHub repository vim/vim prior to version 8.2 that allows for a heap-based buffer overflow.
How is CVE-2022-2182 classified?
CVE-2022-2182 is classified as a Heap-based Buffer Overflow vulnerability.
Which software is affected by CVE-2022-2182?
The software affected by CVE-2022-2182 includes vim/vim versions prior to 8.2.3995-1ubuntu2.10 (Ubuntu), 8.2.5150 (Ubuntu), and 2:8.1.0875-5+deb10u2, 2:8.1.0875-5+deb10u5, 2:8.2.2434-3+deb11u1 (Debian).
How can I fix CVE-2022-2182?
To fix CVE-2022-2182, it is recommended to update vim/vim to versions 8.2.3995-1ubuntu2.10 (Ubuntu), 8.2.5150 (Ubuntu), or 2:8.2.2434-3+deb11u1 (Debian), depending on your operating system.
Where can I find more information about CVE-2022-2182?
You can find more information about CVE-2022-2182 at the following references: [huntr.dev](https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8), [GitHub commit](https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e), [Fedora Project mailing list](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/).