CVE-2022-3153: NULL Pointer Dereference in vim/vim
Last updated 24 July 2024
Other sources
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0626-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.0404
Event History
Frequently Asked Questions
What is CVE-2022-3153?
CVE-2022-3153 is a vulnerability that involves a NULL pointer dereference in the GitHub repository vim/vim prior to version 9.0.0404.
Which software versions are affected by CVE-2022-3153?
The Ubuntu package vim version 2:8.2.3995-1ubuntu2.11 and the Debian package vim versions 2:8.1.0875-5+deb10u2, 2:8.1.0875-5+deb10u5, and 2:8.2.2434-3+deb11u1 are affected by CVE-2022-3153.
How can I fix CVE-2022-3153?
To fix CVE-2022-3153, you should update your Ubuntu vim package to version 2:8.2.3995-1ubuntu2.11 or update your Debian vim package to versions 2:8.1.0875-5+deb10u2, 2:8.1.0875-5+deb10u5, or 2:8.2.2434-3+deb11u1.
What is the Common Weakness Enumeration (CWE) of CVE-2022-3153?
The CWE of CVE-2022-3153 is CWE-476, which is NULL Pointer Dereference.
Where can I find more information about CVE-2022-3153?
You can find more information about CVE-2022-3153 on the MITRE CVE website, Ubuntu Security Notices, and NVD (National Vulnerability Database) websites.