CVE-2022-2874: NULL Pointer Dereference in vim/vim
Last updated 24 July 2024
Other sources
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0229-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.0224
Event History
Frequently Asked Questions
What is CVE-2022-2874?
CVE-2022-2874 is a vulnerability that refers to a NULL Pointer Dereference in the GitHub repository vim/vim prior to version 9.0.0224.
What is the affected software for CVE-2022-2874?
The affected software for CVE-2022-2874 includes Ubuntu packages vim 2:8.2.3995-1ubuntu2.11, vim 9.0.0224, and Debian packages vim 2:9.0.1378-2, vim 2:9.0.1894-1.
How severe is CVE-2022-2874?
CVE-2022-2874 has a NULL Pointer Dereference vulnerability that can potentially lead to denial of service (application crash).
How can I fix CVE-2022-2874?
To fix CVE-2022-2874, update the affected Ubuntu package vim to version 2:8.2.3995-1ubuntu2.11 or install the fixed version 9.0.0224. For Debian, update vim to version 2:9.0.1378-2 or 2:9.0.1894-1.
Where can I find more information about CVE-2022-2874?
More information about CVE-2022-2874 can be found at the following references: [Reference 1](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2874), [Reference 2](https://ubuntu.com/security/notices/USN-6302-1), [Reference 3](https://nvd.nist.gov/vuln/detail/CVE-2022-2874).