PT-2022-1746 · Vim+6 · Vim+6

·

CVE-2022-0213

·

Published

2019-12-23

·

Updated

2024-06-15

CVSS v2.0

6.8

Medium

VectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions vim versions prior to the fixed version
Description The issue is caused by a heap-based buffer overflow in the NameBuff function of the vim text editor. This can allow an attacker to cause a buffer overflow. The estimated number of potentially affected devices is not specified.
Recommendations For versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider restricting the use of the NameBuff function until a patch is available.

Exploit

Fix

Heap Based Buffer Overflow

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2019-3373
ALT-PU-2020-2198
BDU:2022-01025
CVE-2022-0213
DLA-2947-1
DLA-3182-1
MGASA-2022-0023
MGASA-2022-0203
OESA-2022-1514
OPENSUSE-SU-2022_2102-1
OPENSUSE-SU-2024:12337-1
SUSE-SU-2022:2102-1
SUSE-SU-2022:4619-1
USN-5458-1
USN-6026-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Suse
Ubuntu
Vim