vulnerability

Amazon Linux 2023: CVE-2022-0156: Important priority package update for vim

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
2022-01-10
Added
2025-02-17
Modified
2025-02-17

Description

vim is vulnerable to Use After Free
It was found that vim was vulnerable to use-after-free flaw in the way it was treating allocated lines in user functions. A specially crafted file could crash the vim process or possibly lead to other undefined behaviors.

Solution(s)

amazon-linux-2023-upgrade-vim-commonamazon-linux-2023-upgrade-vim-common-debuginfoamazon-linux-2023-upgrade-vim-dataamazon-linux-2023-upgrade-vim-debuginfoamazon-linux-2023-upgrade-vim-debugsourceamazon-linux-2023-upgrade-vim-default-editoramazon-linux-2023-upgrade-vim-enhancedamazon-linux-2023-upgrade-vim-enhanced-debuginfoamazon-linux-2023-upgrade-vim-filesystemamazon-linux-2023-upgrade-vim-minimalamazon-linux-2023-upgrade-vim-minimal-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.