CVE-2022-0417

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.

Description The issue is related to a heap-based buffer overflow in the ex retab function of the src/indent.c component of the Vim text editor. This occurs when using the :retab 0 command, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the :retab 0 command until a patch is available.