CVE-2022-3234: Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
alpine/vimto a version that resolves this vulnerability.Fixed in 9.0.0598-r0 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0626-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.0483
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3234?
This vulnerability has a severity score of 7.8 (High).
How does CVE-2022-3234 affect Vim?
This vulnerability affects Vim versions prior to 9.0.0483.
How can I fix CVE-2022-3234 on Ubuntu?
To fix CVE-2022-3234 on Ubuntu, you need to upgrade Vim to version 9.0.0483.
How can I fix CVE-2022-3234 on Debian?
To fix CVE-2022-3234 on Debian, you need to upgrade Vim to version 2:8.1.0875-5+deb10u6, 2:9.0.1378-2, or 2:9.0.1894-1.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-3234?
The CWE ID for CVE-2022-3234 is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).