Heap-based Buffer Overflow in vim/vim
Summary
CVE-2022-0359: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Affects vim versions < 8.2.4619-r0. Fixed in 8.2.4619-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
vim is a highly configurable text editor built to enable efficient text editing. It is widely used in various operating systems and provides a range of features for developers and users. However, a vulnerability has been discovered in versions prior to 8.2, which allows for a heap-based buffer overflow.
Vulnerability Detail
The vulnerability, identified as CVE-2022-0359, originates from a heap-based buffer overflow in the GitHub repository vim/vim. This vulnerability can be exploited by an attacker to execute arbitrary code or cause a denial of service. The severity of this vulnerability is rated as high, with a CVSS score of 7.8. It affects multiple versions of the vim package in the Alpine Linux ecosystem.
How To Fix
Minimum fixed version
8.2.4619-r0
This is the first release that contains the fix.
sudo apk add --upgrade vimTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the recommended fix by updating the vim package to the fixed versions.
Conclusion
In conclusion, a heap-based buffer overflow vulnerability has been identified in the vim/vim repository. It is crucial to update the vim package to the recommended fixed versions to mitigate the risk of arbitrary code execution or denial of service. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for vim →
FAQ
This vulnerability can allow an attacker to execute arbitrary code or cause a denial of service.
Versions prior to 8.2 of the vim package in the Alpine Linux ecosystem are affected.
The CVSS score of this vulnerability is 7.8, indicating a high severity.
To fix this vulnerability, update the vim package to the recommended fixed versions.
There is no specific workaround mentioned for this vulnerability. Updating to the fixed versions is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for vim.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
