Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2022-0943

Published: 14 March 2022

Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.

Notes

AuthorNote
ccdm94
in bionic and earlier, vulnerable code can be found in src/spell.c
instead of src/spellsuggest.c.

Priority

Medium

CVSS 3 base score: 7.8

Status

Package Release Status
vim
Launchpad, Ubuntu, Debian
bionic
Released (2:8.0.1453-1ubuntu1.9)
focal
Released (2:8.1.2269-1ubuntu5.8)
impish Ignored
(reached end-of-life)
jammy
Released (2:8.2.3995-1ubuntu2.1)
trusty
Released (2:7.4.052-1ubuntu3.1+esm5)
upstream
Released (8.2.4563)
xenial
Released (2:7.4.1689-3ubuntu1.5+esm6)
Patches:
upstream: https://github.com/vim/vim/commit/5c68617d395f9d7b824f68475b24ce3e38d653a3