CVE-2022-3235: Use After Free in vim/vim
Last updated 24 July 2024
Other sources
Use After Free in GitHub repository vim/vim prior to 9.0.0490.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
alpine/vimto a version that resolves this vulnerability.Fixed in 9.0.0598-r0 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0626-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.0490
Event History
Frequently Asked Questions
What is CVE-2022-3235?
CVE-2022-3235 is a vulnerability that allows for Use After Free in the GitHub repository vim/vim prior to version 9.0.0490.
What is the severity of CVE-2022-3235?
The severity of CVE-2022-3235 is not provided in the given information.
How does CVE-2022-3235 affect the software?
CVE-2022-3235 affects the vim/vim package on Ubuntu and Debian prior to version 9.0.0490 and 2:8.1.0875-5+deb10u6, 2:9.0.1378-2, and 2:9.0.1894-1 respectively.
How can CVE-2022-3235 be fixed?
To fix CVE-2022-3235, users should update their vim/vim package to at least version 9.0.0490 on Ubuntu and 2:8.1.0875-5+deb10u2, 2:8.2.2434-3+deb11u1 on Debian.
Where can I find more information about CVE-2022-3235?
You can find more information about CVE-2022-3235 at the following references: [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3235), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2022-3235), [Launchpad](https://launchpad.net/bugs/cve/CVE-2022-3235).