Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Mar 21, 2024 | Aug 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-debuginfoUpgrade vim-dataUpgrade vim-minimalUpgrade vim-commonUpgrade vim-X11 | Mar 7, 2023 | Aug 1, 2022 |
| Amazon_linux_2023 | — | Upgrade vim-debuginfoUpgrade vim-commonUpgrade vim-default-editorUpgrade vim-debugsourceUpgrade vim-filesystemUpgrade vim-common-debuginfoUpgrade vim-minimalUpgrade vim-enhanced-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-enhancedUpgrade vim-data | Feb 17, 2025 | Aug 1, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 1, 2022 |
| Suse | — | Upgrade vimUpgrade gvimUpgrade vim-smallUpgrade vim-data-commonUpgrade vim-data | Oct 26, 2022 | Aug 1, 2022 |
| Ubuntu | — | Upgrade xxdUpgrade vim-gtkUpgrade vim-runtime (Ubuntu Pro)Upgrade vim-tinyUpgrade vim-gtk (Ubuntu Pro)Upgrade vim (Ubuntu Pro)Upgrade xxd (Ubuntu Pro)Upgrade vim-gtk3Upgrade vim-gtk3 (Ubuntu Pro)Upgrade vimUpgrade vim-noxUpgrade vim-athena (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vim-tiny (Ubuntu Pro)Upgrade vim-athena | Aug 22, 2023 | Aug 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub