CVE-2022-2206: Out-of-bounds Read in vim/vim
Last updated 24 July 2024
Other sources
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 8.2
Event History
Frequently Asked Questions
What is CVE-2022-2206?
CVE-2022-2206 is an out-of-bounds read vulnerability in the GitHub repository vim/vim prior to version 8.2.
Which software versions are affected by CVE-2022-2206?
Versions 2:8.0.1453-1ubuntu1.12, 2:8.1.2269-1ubuntu5.13, 2:8.2.3995-1ubuntu2.5, 2:7.4.052-1ubuntu3.1+, 2:7.4.1689-3ubuntu1.5+, and 8.2.5160 of the vim package for Ubuntu and versions 2:8.1.0875-5+deb10u2, 2:8.1.0875-5+deb10u5, and 2:8.2.2434-3+deb11u1 of the vim package for Debian are affected.
How severe is CVE-2022-2206?
CVE-2022-2206 has a severity level of out-of-bounds read, which can potentially lead to information leakage and possible code execution.
How can I fix CVE-2022-2206?
To fix CVE-2022-2206, update the vim package to the recommended versions: 8.2.5160 for Ubuntu and 2:8.2.2434-3+deb11u1 for Debian.
Where can I find more information about CVE-2022-2206?
You can find more information about CVE-2022-2206 on the MITRE website (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2206) and the Fedora Project mailing list announcements (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ and https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/).