PT-2022-1728 · Vim+11 · Vim+11
Brammool
·
Published
2022-01-24
·
Updated
2025-03-30
·
CVE-2022-0359
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
vim versions prior to 8.2
Description
The issue is a heap-based buffer overflow in the vim text editor, specifically in the
init ccline() function located in ex getln.c. This overflow is caused by insufficient validation of user input, allowing an attacker to potentially exploit the vulnerability and cause a buffer overflow. The estimated number of potentially affected devices is not provided.Recommendations
For versions prior to 8.2, update to version 8.2 or later to resolve the issue.
As a temporary workaround, consider restricting the use of the
init ccline() function in ex getln.c until a patch is available.Exploit
Fix
Memory Corruption
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Suse
Ubuntu
Vim