Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Mar 26, 2024 | Aug 15, 2022 |
| Amazon Linux Ami 2 | — | Upgrade vim-minimalUpgrade vim-dataUpgrade vim-enhancedUpgrade vim-debuginfoUpgrade vim-commonUpgrade vim-X11Upgrade vim-filesystem | Oct 24, 2022 | Aug 15, 2022 |
| Amazon_linux | — | Upgrade vim | Oct 21, 2022 | Aug 15, 2022 |
| Amazon_linux_2023 | — | Upgrade vim-debugsourceUpgrade vim-debuginfoUpgrade vim-commonUpgrade vim-default-editorUpgrade vim-filesystemUpgrade vim-minimal-debuginfoUpgrade vim-dataUpgrade vim-common-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-minimalUpgrade vim-enhanced | Feb 17, 2025 | Aug 15, 2022 |
| Debian | — | Upgrade vim | Jul 30, 2024 | Aug 15, 2022 |
| Gentoo Linux | — | Upgrade app-editors/vim-core.Upgrade app-editors/vim.Upgrade app-editors/gvim. | May 4, 2023 | Aug 15, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 15, 2022 |
| Suse | — | Upgrade vim-dataUpgrade vim-data-commonUpgrade vimUpgrade gvimUpgrade vim-small | Oct 26, 2022 | Aug 15, 2022 |
| Ubuntu | — | Upgrade vim-gtk3Upgrade vim-gtk (Ubuntu Pro)Upgrade vim-tiny (Ubuntu Pro)Upgrade xxdUpgrade vim-tinyUpgrade vim-gtkUpgrade vim-gtk3 (Ubuntu Pro)Upgrade vim-athenaUpgrade vim (Ubuntu Pro)Upgrade xxd (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vimUpgrade vim-runtime (Ubuntu Pro)Upgrade vim-athena (Ubuntu Pro)Upgrade vim-nox | Aug 22, 2023 | Aug 15, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 15, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub