CVE-2022-2980: NULL Pointer Dereference in vim/vim
Last updated 24 July 2024
Other sources
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
alpine/vimto a version that resolves this vulnerability.Fixed in 9.0.0369-r0 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0626-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.0259
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2980?
The severity of CVE-2022-2980 is high.
How do I fix CVE-2022-2980?
To fix CVE-2022-2980, update to version 9.0.0259 or later of vim/vim.
What is the affected software for CVE-2022-2980?
The affected software for CVE-2022-2980 is vim/vim versions prior to 9.0.0259.
Where can I find more information on CVE-2022-2980?
You can find more information on CVE-2022-2980 at the following references: [CVE Mitre](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2980), [Ubuntu Security Notices](https://ubuntu.com/security/notices/USN-5995-1), [NVD NIST](https://nvd.nist.gov/vuln/detail/CVE-2022-2980).
What is the CWE category for CVE-2022-2980?
The CWE category for CVE-2022-2980 is CWE-476 (NULL Pointer Dereference).