vulnerability

Amazon Linux AMI 2: CVE-2022-4141: Security patch for vim (ALAS-2023-1912)

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
2022-11-25
Added
2023-01-24
Modified
2025-01-28

Description

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.

Solution(s)

amazon-linux-ami-2-upgrade-vim-commonamazon-linux-ami-2-upgrade-vim-dataamazon-linux-ami-2-upgrade-vim-debuginfoamazon-linux-ami-2-upgrade-vim-enhancedamazon-linux-ami-2-upgrade-vim-filesystemamazon-linux-ami-2-upgrade-vim-minimalamazon-linux-ami-2-upgrade-vim-x11
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.