CVE-2022-3324

Summary

CVE	CVE-2022-3324
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-09-27 23:15:00 UTC
Updated	2023-11-07 03:51:00 UTC
Description	Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.

Risk And Classification

Problem Types: CWE-121

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Debian	Debian Linux	10.0	All	All	All
Operating System	Fedoraproject	Fedora	35	All	All	All
Operating System	Fedoraproject	Fedora	36	All	All	All
Operating System	Fedoraproject	Fedora	37	All	All	All
Application	Vim	Vim	All	All	All	All

References

Reference	Source	Link	Tags
[SECURITY] [DLA 3182-1] vim security update	MLIST	lists.debian.org
[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org
Vim, gVim: Multiple Vulnerabilities (GLSA 202305-16) — Gentoo security	GENTOO	security.gentoo.org
patch 9.0.0598: using negative array index with negative width window · vim/vim@8279af5 · GitHub	MISC	github.com
[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
[SECURITY] Fedora 37 Update: vim-9.0.828-1.fc37 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
huntr – Security Bounties for any GitHub repository	CONFIRM	huntr.dev
[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org
[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
[SECURITY] Fedora 37 Update: vim-9.0.828-1.fc37 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

181198 Debian Security Update for vim (DLA 3182-1)
182228 Debian Security Update for vim (CVE-2022-3324)
199815 Ubuntu Security Notification for Vim Vulnerabilities (USN-6420-1)
283202 Fedora Security Update for vim (FEDORA-2022-40161673a3)
283216 Fedora Security Update for vim (FEDORA-2022-fff548cfab)
283438 Fedora Security Update for vim (FEDORA-2022-4bc60c32a2)
354794 Amazon Linux Security Advisory for vim : ALAS2-2023-1975
354870 Amazon Linux Security Advisory for vim : ALAS-2023-1716
355260 Amazon Linux Security Advisory for vim : ALAS2023-2023-117
672401 EulerOS Security Update for vim (EulerOS-SA-2022-2810)
672426 EulerOS Security Update for vim (EulerOS-SA-2022-2835)
672429 EulerOS Security Update for vim (EulerOS-SA-2022-2861)
672488 EulerOS Security Update for vim (EulerOS-SA-2023-1050)
672500 EulerOS Security Update for vim (EulerOS-SA-2023-1025)
672545 EulerOS Security Update for vim (EulerOS-SA-2023-1116)
672558 EulerOS Security Update for vim (EulerOS-SA-2023-1140)
672702 EulerOS Security Update for vim (EulerOS-SA-2023-1518)
710718 Gentoo Linux Vim, gVim Multiple Vulnerabilities (GLSA 202305-16)
752947 SUSE Enterprise Linux Security Update for vim (SUSE-SU-2022:4282-1)
753066 SUSE Enterprise Linux Security Update for vim (SUSE-SU-2022:4619-1)
904065 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (11055)
904069 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (11049)
904192 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (11055-1)
904269 Common Base Linux Mariner (CBL-Mariner) Security Update for vim (11049-1)