Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Mar 26, 2024 | Aug 15, 2022 |
| Amazon Linux Ami 2 | — | Upgrade vim-commonUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-X11Upgrade vim-debuginfoUpgrade vim-dataUpgrade vim-minimal | Oct 24, 2022 | Aug 15, 2022 |
| Amazon_linux | — | Upgrade vim | Oct 21, 2022 | Aug 15, 2022 |
| Amazon_linux_2023 | — | Upgrade vim-filesystemUpgrade vim-debugsourceUpgrade vim-commonUpgrade vim-default-editorUpgrade vim-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-common-debuginfoUpgrade vim-data | Feb 17, 2025 | Aug 15, 2022 |
| Debian | — | Upgrade vim | Jul 30, 2024 | Aug 15, 2022 |
| Gentoo Linux | — | Upgrade app-editors/vim-core.Upgrade app-editors/vim.Upgrade app-editors/gvim. | May 4, 2023 | Aug 15, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 15, 2022 |
| Suse | — | Upgrade vim-dataUpgrade gvimUpgrade vim-data-commonUpgrade vimUpgrade vim-small | Oct 26, 2022 | Aug 15, 2022 |
| Ubuntu | — | Upgrade vim-nox (Ubuntu Pro)Upgrade vim-athena (Ubuntu Pro)Upgrade xxd (Ubuntu Pro)Upgrade vimUpgrade vim-noxUpgrade vim-runtime (Ubuntu Pro)Upgrade vim-tiny (Ubuntu Pro)Upgrade xxdUpgrade vim-gtk (Ubuntu Pro)Upgrade vim (Ubuntu Pro)Upgrade vim-athenaUpgrade vim-tinyUpgrade vim-gtkUpgrade vim-gtk3Upgrade vim-gtk3 (Ubuntu Pro) | Aug 22, 2023 | Aug 15, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 15, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub