CVE-2022-2819: Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
alpine/vimto a version that resolves this vulnerability.Fixed in 9.0.0224-r0 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0229-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.0211
Event History
Frequently Asked Questions
What is CVE-2022-2819?
CVE-2022-2819 is a heap-based buffer overflow vulnerability in the GitHub repository vim/vim prior to version 9.0.0211.
How does CVE-2022-2819 affect Ubuntu?
CVE-2022-2819 affects Ubuntu versions of vim up to and including 2:8.2.3995-1ubuntu2.11.
How does CVE-2022-2819 affect Debian?
CVE-2022-2819 affects Debian versions of vim up to and including 2:8.2.2434-3+deb11u1.
What is the recommended remedy for Ubuntu vim?
The recommended remedy for Ubuntu vim is to update to version 9.0.0211 or later.
What is the recommended remedy for Debian vim?
The recommended remedy for Debian vim is to update to a version higher than 2:8.2.2434-3+deb11u1.