Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vim-enhancedUpgrade vim-X11Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-common | Aug 8, 2022 | May 10, 2022 |
| Alpine Linux | alpine-linux-upgrade-vim | Mar 26, 2024 | May 9, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-vim-commonamazon-linux-ami-2-upgrade-vim-dataamazon-linux-ami-2-upgrade-vim-debuginfoamazon-linux-ami-2-upgrade-vim-enhancedamazon-linux-ami-2-upgrade-vim-filesystemamazon-linux-ami-2-upgrade-vim-minimalamazon-linux-ami-2-upgrade-vim-x11 | Sep 30, 2022 | May 10, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-vim | Aug 5, 2022 | May 10, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-vim-commonamazon-linux-2023-upgrade-vim-common-debuginfoamazon-linux-2023-upgrade-vim-dataamazon-linux-2023-upgrade-vim-debuginfoamazon-linux-2023-upgrade-vim-debugsourceamazon-linux-2023-upgrade-vim-default-editoramazon-linux-2023-upgrade-vim-enhancedamazon-linux-2023-upgrade-vim-enhanced-debuginfoamazon-linux-2023-upgrade-vim-filesystemamazon-linux-2023-upgrade-vim-minimalamazon-linux-2023-upgrade-vim-minimal-debuginfo | Feb 17, 2025 | May 10, 2022 | |
| Apple Osx Vim | apple-osx-upgrade-latest | Nov 29, 2022 | May 10, 2022 | |
| Centos_linux | — | Upgrade vim-X11Upgrade vim-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-filesystemUpgrade vim-common-debuginfoUpgrade vim-minimalUpgrade vim-debugsourceUpgrade vim-X11-debuginfoUpgrade vim-enhancedUpgrade vim-common | Jul 5, 2022 | May 10, 2022 |
| Debian | debian-upgrade-vim | May 18, 2022 | May 10, 2022 | |
| Gentoo Linux | — | Upgrade app-editors/vim-core.Upgrade app-editors/gvim.Upgrade app-editors/vim. | Aug 22, 2022 | May 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-common | Aug 2, 2022 | May 10, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade vim-minimalUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-common | Oct 28, 2022 | May 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-enhancedUpgrade vim-common | Aug 18, 2022 | May 10, 2022 |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-vim-commonhuawei-euleros-2_0_sp8-upgrade-vim-enhancedhuawei-euleros-2_0_sp8-upgrade-vim-filesystemhuawei-euleros-2_0_sp8-upgrade-vim-minimalhuawei-euleros-2_0_sp8-upgrade-vim-x11 | Aug 18, 2022 | May 10, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-vim-commonhuawei-euleros-2_0_sp9-upgrade-vim-enhancedhuawei-euleros-2_0_sp9-upgrade-vim-filesystemhuawei-euleros-2_0_sp9-upgrade-vim-minimal | Jul 11, 2022 | May 10, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-vim-commonoracle-linux-upgrade-vim-enhancedoracle-linux-upgrade-vim-filesystemoracle-linux-upgrade-vim-minimaloracle-linux-upgrade-vim-x11 | Jul 2, 2022 | May 10, 2022 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-vim-commonredhat-upgrade-vim-common-debuginforedhat-upgrade-vim-debuginforedhat-upgrade-vim-debugsourceredhat-upgrade-vim-enhancedredhat-upgrade-vim-enhanced-debuginforedhat-upgrade-vim-filesystemredhat-upgrade-vim-minimalredhat-upgrade-vim-minimal-debuginforedhat-upgrade-vim-x11redhat-upgrade-vim-x11-debuginfo | Jul 5, 2022 | May 10, 2022 | |
| Rocky_linux | rocky-upgrade-vim-commonrocky-upgrade-vim-common-debuginforocky-upgrade-vim-debuginforocky-upgrade-vim-debugsourcerocky-upgrade-vim-enhancedrocky-upgrade-vim-enhanced-debuginforocky-upgrade-vim-minimalrocky-upgrade-vim-minimal-debuginforocky-upgrade-vim-x11rocky-upgrade-vim-x11-debuginfo | Mar 12, 2024 | May 10, 2022 | |
| Ubuntu | ubuntu-pro-upgrade-vimubuntu-upgrade-vim | Jun 7, 2022 | May 10, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub