Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-vim | Mar 21, 2024 | May 16, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-vim-commonamazon-linux-ami-2-upgrade-vim-dataamazon-linux-ami-2-upgrade-vim-debuginfoamazon-linux-ami-2-upgrade-vim-enhancedamazon-linux-ami-2-upgrade-vim-filesystemamazon-linux-ami-2-upgrade-vim-minimalamazon-linux-ami-2-upgrade-vim-x11 | Sep 30, 2022 | Jun 20, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-vim | Aug 5, 2022 | Jun 20, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-vim-commonamazon-linux-2023-upgrade-vim-common-debuginfoamazon-linux-2023-upgrade-vim-dataamazon-linux-2023-upgrade-vim-debuginfoamazon-linux-2023-upgrade-vim-debugsourceamazon-linux-2023-upgrade-vim-default-editoramazon-linux-2023-upgrade-vim-enhancedamazon-linux-2023-upgrade-vim-enhanced-debuginfoamazon-linux-2023-upgrade-vim-filesystemamazon-linux-2023-upgrade-vim-minimalamazon-linux-2023-upgrade-vim-minimal-debuginfo | Feb 17, 2025 | May 13, 2022 | |
| Apple Osx Vim | apple-osx-upgrade-latest | Oct 28, 2022 | Jun 20, 2022 | |
| Debian | debian-upgrade-vim | Jun 22, 2022 | Jun 20, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-app-editors-gvimgentoo-linux-upgrade-app-editors-vimgentoo-linux-upgrade-app-editors-vim-core | Aug 22, 2022 | Jun 20, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-vim-commonhuawei-euleros-2_0_sp10-upgrade-vim-enhancedhuawei-euleros-2_0_sp10-upgrade-vim-filesystemhuawei-euleros-2_0_sp10-upgrade-vim-minimal | Aug 18, 2022 | Jun 20, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-vim-commonhuawei-euleros-2_0_sp8-upgrade-vim-enhancedhuawei-euleros-2_0_sp8-upgrade-vim-filesystemhuawei-euleros-2_0_sp8-upgrade-vim-minimalhuawei-euleros-2_0_sp8-upgrade-vim-x11 | Oct 11, 2022 | Jun 20, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-vim-commonhuawei-euleros-2_0_sp9-upgrade-vim-enhancedhuawei-euleros-2_0_sp9-upgrade-vim-filesystemhuawei-euleros-2_0_sp9-upgrade-vim-minimal | Sep 14, 2022 | Jun 20, 2022 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jun 20, 2022 | |
| Suse | — | suse-upgrade-gvimsuse-upgrade-vimsuse-upgrade-vim-datasuse-upgrade-vim-data-commonsuse-upgrade-vim-small | Oct 26, 2022 | Jun 20, 2022 |
| Ubuntu | ubuntu-pro-upgrade-vimubuntu-pro-upgrade-vim-athenaubuntu-pro-upgrade-vim-gnomeubuntu-pro-upgrade-vim-gtkubuntu-pro-upgrade-vim-noxubuntu-pro-upgrade-vim-tinyubuntu-upgrade-vimubuntu-upgrade-vim-athenaubuntu-upgrade-vim-gnomeubuntu-upgrade-vim-gtkubuntu-upgrade-vim-gtk3ubuntu-upgrade-vim-motifubuntu-upgrade-vim-noxubuntu-upgrade-vim-tiny | Apr 10, 2023 | Jun 20, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub