Your submission was sent successfully! Close

CVE-2022-1620

Published: 8 May 2022

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.

Priority

Medium

CVSS 3 base score: 7.5

Status

Package Release Status
vim
Launchpad, Ubuntu, Debian
bionic Needed

focal Needed

impish Needed

jammy Needed

trusty Needed

upstream
Released (8.2.4901)
xenial
Released (2:7.4.1689-3ubuntu1.5+esm6)
Patches:
upstream: https://github.com/vim/vim/commit/8e4b76da1d7e987d43ca960dfbc372d1c617466f