CVE-2022-2982: Use After Free in vim/vim
First published: Thu Aug 25 2022(Updated: )
Last updated 24 July 2024
Credit: security@huntr.dev security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Vim Vim | <9.0.0260 | |
| Fedoraproject Fedora | =37 | |
| debian/vim | <=2:8.2.2434-3+deb11u1 | 2:9.0.1378-2 2:9.1.0777-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/vim/vim/commit/d6c67629ed05aae436164eec474832daf8ba7420
- https://huntr.dev/bounties/53f53d9a-ba8a-4985-b7ba-23efbe6833be
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/
- https://security.gentoo.org/glsa/202305-16
- https://launchpad.net/bugs/cve/CVE-2022-2982
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/
- https://security-tracker.debian.org/tracker/CVE-2022-2982
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2982
- https://nvd.nist.gov/vuln/detail/CVE-2022-2982
- https://ubuntu.com/security/CVE-2022-2982
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-2982.
What is the title of the vulnerability?
The title of the vulnerability is 'Use After Free in GitHub repository vim/vim prior to 9.0.0260.'
What is the severity level of the vulnerability?
The severity level of the vulnerability is not provided.
Which software versions are affected by the vulnerability?
The vulnerability affects vim prior to version 9.0.0260 on Ubuntu 20.04 and Debian 10 and 11.
How can I fix the vulnerability?
To fix the vulnerability, update vim to version 9.0.0260 on Ubuntu 20.04 and apply the recommended remedies on Debian 10 and 11.
- collector/nvd-index
- agent/type
- agent/remedy
- collector/launchpad-cve
- source/Launchpad
- agent/first-publish-date
- agent/author
- agent/description
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/last-modified-date
- agent/event
- agent/tags
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/vim
- canonical/vim vim
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/37
- package-manager/debian