CVE-2022-3520: Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-3520?
CVE-2022-3520 is a heap-based buffer overflow vulnerability in the GitHub repository vim/vim prior to version 9.0.0765.
What software is affected by CVE-2022-3520?
The software affected by CVE-2022-3520 includes the vim package with versions prior to 9.0.0765 for Ubuntu and versions prior to 9.0.1378-2 and 9.0.1894-1 for Debian.
How severe is CVE-2022-3520?
CVE-2022-3520 has a severity score of 5.3 (Medium) according to the National Vulnerability Database.
How can I fix CVE-2022-3520?
To fix CVE-2022-3520, update the vim package to version 9.0.0765 for Ubuntu or version 9.0.1378-2 or 9.0.1894-1 for Debian, depending on the distribution you are using.
Where can I find more information about CVE-2022-3520?
You can find more information about CVE-2022-3520 at the following references: [CVE Mitre](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3520), [National Vulnerability Database](https://nvd.nist.gov/vuln/detail/CVE-2022-3520), [Launchpad](https://launchpad.net/bugs/cve/CVE-2022-3520)