PT-2022-1746 · Vim+6 · Vim+6
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
vim versions prior to the fixed version
Description
The issue is caused by a heap-based buffer overflow in the NameBuff function of the vim text editor. This can allow an attacker to cause a buffer overflow. The estimated number of potentially affected devices is not specified.
Recommendations
For versions prior to the fixed version, update to the latest version to resolve the issue.
As a temporary workaround, consider restricting the use of the NameBuff function until a patch is available.
Exploit
Fix
Heap Based Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Suse
Ubuntu
Vim