CVE-2022-2284: Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0
Event History
Frequently Asked Questions
What is the vulnerability ID for this heap-based buffer overflow?
The vulnerability ID for this heap-based buffer overflow is CVE-2022-2284.
What is the severity level of CVE-2022-2284?
The severity level of CVE-2022-2284 has not been specified.
Which software versions are affected by CVE-2022-2284?
Software versions prior to 9.0 of the GitHub repository vim/vim are affected by CVE-2022-2284.
How can I fix the heap-based buffer overflow in vim/vim?
To fix the heap-based buffer overflow in vim/vim, update to version 9.0 or later of the software.
Where can I find more information about CVE-2022-2284?
You can find more information about CVE-2022-2284 at the following references: [reference 1](https://huntr.dev/bounties/571d25ce-8d53-4fa0-b620-27f2a8a14874), [reference 2](https://github.com/vim/vim/commit/3d51ce18ab1be4f9f6061568a4e7fabf00b21794), [reference 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/).