CVE-2022-3234

Summary

CVE	CVE-2022-3234
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-09-17 22:15:00 UTC
Updated	2023-11-07 03:50:00 UTC
Description	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.

Risk And Classification

Problem Types: CWE-122

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Debian	Debian Linux	10.0	All	All	All
Operating System	Fedoraproject	Fedora	35	All	All	All
Operating System	Fedoraproject	Fedora	36	All	All	All
Operating System	Fedoraproject	Fedora	37	All	All	All
Application	Vim	Vim	All	All	All	All

References

Reference	Source	Link	Tags
huntr – Security Bounties for any GitHub repository	CONFIRM	huntr.dev
[SECURITY] [DLA 3182-1] vim security update	MLIST	lists.debian.org
[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org
Vim, gVim: Multiple Vulnerabilities (GLSA 202305-16) — Gentoo security	GENTOO	security.gentoo.org
[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
[SECURITY] Fedora 37 Update: vim-9.0.828-1.fc37 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org
[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
patch 9.0.0483: illegal memory access when replacing in virtualedit mode · vim/vim@c249913 · GitHub	MISC	github.com
[SECURITY] Fedora 37 Update: vim-9.0.828-1.fc37 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

181198 Debian Security Update for vim (DLA 3182-1)
182654 Debian Security Update for vim (CVE-2022-3234)
199815 Ubuntu Security Notification for Vim Vulnerabilities (USN-6420-1)
283202 Fedora Security Update for vim (FEDORA-2022-40161673a3)
283216 Fedora Security Update for vim (FEDORA-2022-fff548cfab)
283438 Fedora Security Update for vim (FEDORA-2022-4bc60c32a2)
354794 Amazon Linux Security Advisory for vim : ALAS2-2023-1975
355260 Amazon Linux Security Advisory for vim : ALAS2023-2023-117
502808 Alpine Linux Security Update for vim
672330 EulerOS Security Update for vim (EulerOS-SA-2022-2783)
672395 EulerOS Security Update for vim (EulerOS-SA-2022-2748)
672401 EulerOS Security Update for vim (EulerOS-SA-2022-2810)
672426 EulerOS Security Update for vim (EulerOS-SA-2022-2835)
672429 EulerOS Security Update for vim (EulerOS-SA-2022-2861)
672488 EulerOS Security Update for vim (EulerOS-SA-2023-1050)
672500 EulerOS Security Update for vim (EulerOS-SA-2023-1025)
672702 EulerOS Security Update for vim (EulerOS-SA-2023-1518)
710718 Gentoo Linux Vim, gVim Multiple Vulnerabilities (GLSA 202305-16)
752947 SUSE Enterprise Linux Security Update for vim (SUSE-SU-2022:4282-1)
753066 SUSE Enterprise Linux Security Update for vim (SUSE-SU-2022:4619-1)
904024 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (10977)
904025 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (10976)
904131 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (10976-1)
904202 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (10977-1)