CVE-2022-2982: Use After Free in vim/vim
Last updated 24 July 2024
Other sources
Use After Free in GitHub repository vim/vim prior to 9.0.0260.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
alpine/vimto a version that resolves this vulnerability.Fixed in 9.0.0369-r0 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0626-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.0260
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-2982.
What is the title of the vulnerability?
The title of the vulnerability is 'Use After Free in GitHub repository vim/vim prior to 9.0.0260.'
What is the severity level of the vulnerability?
The severity level of the vulnerability is not provided.
Which software versions are affected by the vulnerability?
The vulnerability affects vim prior to version 9.0.0260 on Ubuntu 20.04 and Debian 10 and 11.
How can I fix the vulnerability?
To fix the vulnerability, update vim to version 9.0.0260 on Ubuntu 20.04 and apply the recommended remedies on Debian 10 and 11.