PT-2022-3533 · Vim+6 · Vim+6

Brammool

·

Published

2022-06-30

·

Updated

2024-06-15

·

CVE-2022-2264

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0
Description The issue is related to a heap-based buffer overflow in the register.c component of the Vim text editor. This can allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For versions prior to 9.0, update to version 9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and configuring the editor to minimize the risk of exploitation.

Exploit

Fix

Heap Based Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-122

Related Identifiers

ALT-PU-2022-2600
ALT-PU-2022-2637
ALT-PU-2022-2659
ALT-PU-2022-3192
AZL-9989
BDU:2022-04316
CVE-2022-2264
MGASA-2022-0430
OESA-2022-1766
OPENSUSE-SU-2022_3229-1
OPENSUSE-SU-2024:12337-1
SUSE-SU-2022:3229-1
SUSE-SU-2022:4619-1
USN-6270-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Suse
Ubuntu
Vim