CVE-2022-47024
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11...
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Record
CVE-2022-47024- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List
7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Record
CVE-2022-47024- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2022-49802
7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Record
EUVD-2022-49802- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5jpw-hxh6-542f
7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11...
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Record
GHSA-5jpw-hxh6-542f- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-47024
7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Record
ALPINE-CVE-2022-47024- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVBELL-CVE-2022-47024
7.8
- Record
BELL-CVE-2022-47024- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSV
7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Record
CVE-2022-47024- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-47024
7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Record
DEBIAN-CVE-2022-47024- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVOESA-2023-1061
7.8
vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.
Security Fix(es):
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.(CVE-2023-0288)
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.(CVE-2022-47024)
- Record
OESA-2023-1061- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:0958
7.8
Red Hat Security Advisory: vim security update
- Record
RHSA-2023:0958- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2023:0958
7.8
Moderate: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
- vim: no check if the return value of XChangeGC() is NULL (CVE-2022-47024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:0958- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-47024
7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Record
UBUNTU-CVE-2022-47024- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2023:0958 No score
Moderate: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
- vim: no check if the return value of XChangeGC() is NULL (CVE-2022-47024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:0958- Updated
- 2026-11-02
OSVCLSA-2023-1680210210 No score
Fix CVE(s): CVE-2022-47024
- SECURITY UPDATE: No check if the return value of XCreateGC() is NULL
- debian/patches/CVE-2022-47024: Only use the return value when it is not NULL.
- CVE-2022-47024
- Record
CLSA-2023-1680210210- Updated
- 2026-11-02
OSVMGASA-2023-0075 No score
Updated vim packages fix security vulnerability
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts. (CVE-2022-47024)
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)
- Record
MGASA-2023-0075- Updated
- 2026-11-02
OSVUSN-5836-1 No score
vim vulnerabilities
It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
- Record
USN-5836-1- Updated
- 2026-11-02
OSVUSN-5963-1 No score
vim vulnerabilities
It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-47024, CVE-2023-0049, CVE-2023-0054, CVE-2023-0288, CVE-2023-0433)
It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 22.04
LTS, and Ubuntu 22.10. (CVE-2023-0051)
It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. (CVE-2023-1170, CVE-2023-1175)
It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 20.04
LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-1264)
- Record
USN-5963-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vimAlpine:v3.18 |
8.1.2269 up to 9.0.0999-r0 | 9.0.0999-r0 |
vimAlpine:v3.19 |
8.1.2269 up to 9.0.0999-r0 | 9.0.0999-r0 |
vimAlpine:v3.20 |
8.1.2269 up to 9.0.0999-r0 | 9.0.0999-r0 |
vimAlpine:v3.21 |
8.1.2269 up to 9.0.0999-r0 | 9.0.0999-r0 |
vimAlpine:v3.22 |
8.1.2269 up to 9.0.0999-r0 | 9.0.0999-r0 |
vimAlpine:v3.23 |
8.1.2269 up to 9.0.0999-r0 | 9.0.0999-r0 |
vimAlpine:v3.24 |
8.1.2269 up to 9.0.0999-r0 | 9.0.0999-r0 |
vim-X11AlmaLinux:9 |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-commonAlmaLinux:9 |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-enhancedAlmaLinux:9 |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
vim-filesystemAlmaLinux:9 |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-minimalAlmaLinux:9 |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vimAlpaquita:23 |
9.0.0820-r2 up to 9.0.0999-r0 | 9.0.0999-r0 |
vimTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-athenaTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-athena-py2TuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-commonTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-docTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-gnomeTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-gnome-py2TuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-gtkTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-gtk-py2TuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-gtk3TuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-gtk3-py2TuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-gui-commonTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-noxTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-nox-py2TuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-runtimeTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vim-tinyTuxCare:Ubuntu:16.04 |
before 3:7.4.1689-3ubuntu1.5+tuxcare.els41 | 3:7.4.1689-3ubuntu1.5+tuxcare.els41 |
vimDebian:12 |
before 2:9.0.0626-1 | 2:9.0.0626-1 |
vimDebian:13 |
before 2:9.0.0626-1 | 2:9.0.0626-1 |
vimDebian:14 |
before 2:9.0.0626-1 | 2:9.0.0626-1 |
vimMageia:8 From an advisory covering 2 CVEs |
before 9.0.1314-1.mga8 | 9.0.1314-1.mga8 |
vimopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 9.0-7.oe1 | 9.0-7.oe1 |
vimopenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 9.0-7.oe1 | 9.0-7.oe1 |
vimopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 9.0-8.oe2203sp1 | 9.0-8.oe2203sp1 |
vimopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 9.0-8.oe2203sp1 | 9.0-8.oe2203sp1 |
vim-X11Red Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-X11-debuginfoRed Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-commonRed Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-common-debuginfoRed Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-debuginfoRed Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-debugsourceRed Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-enhancedRed Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-enhanced-debuginfoRed Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-minimal-debuginfoRed Hat:enterprise_linux:9::appstream |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vimRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-X11-debuginfoRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-common-debuginfoRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-debuginfoRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-debugsourceRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-enhanced-debuginfoRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-filesystemRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-minimalRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vim-minimal-debuginfoRed Hat:enterprise_linux:9::baseos |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vimRocky Linux:9 |
before 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 |
vimUbuntu:Pro:14.04:LTS |
before 2:7.4.052-1ubuntu3.1+esm6, plus listed versions 2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1 Show 4 moreShow less2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm5 |
2:7.4.052-1ubuntu3.1+esm6 |
vimUbuntu:Pro:16.04:LTS |
before 2:7.4.1689-3ubuntu1.5+esm15, plus listed versions 2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1 Show 20 moreShow less2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm14 |
2:7.4.1689-3ubuntu1.5+esm15 |
vimUbuntu:18.04:LTS |
before 2:8.0.1453-1ubuntu1.11, plus listed versions 2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3 Show 9 moreShow less2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.10 |
2:8.0.1453-1ubuntu1.11 |
vimUbuntu:20.04:LTS |
before 2:8.1.2269-1ubuntu5.12, plus listed versions 2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4 Show 8 moreShow less2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.11 |
2:8.1.2269-1ubuntu5.12 |
vimUbuntu:22.04:LTS |
before 2:8.2.3995-1ubuntu2.4, plus listed versions 2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3 Show 5 moreShow less2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.3 |
2:8.2.3995-1ubuntu2.4 |
vimUbuntu:Pro:14.04:LTS From an advisory covering 5 CVEs |
before 2:7.4.052-1ubuntu3.1+esm6, plus listed versions 2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1 Show 4 moreShow less2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm5 |
2:7.4.052-1ubuntu3.1+esm6 |
vimUbuntu:Pro:16.04:LTS From an advisory covering 5 CVEs |
before 2:7.4.1689-3ubuntu1.5+esm15, plus listed versions 2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1 Show 20 moreShow less2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm14 |
2:7.4.1689-3ubuntu1.5+esm15 |
vimUbuntu:Pro:14.04:LTS From an advisory covering 9 CVEs |
before 2:7.4.052-1ubuntu3.1+esm7, plus listed versions 2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1 Show 5 moreShow less2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm52:7.4.052-1ubuntu3.1+esm6 |
2:7.4.052-1ubuntu3.1+esm7 |
vimUbuntu:Pro:16.04:LTS From an advisory covering 9 CVEs |
before 2:7.4.1689-3ubuntu1.5+esm17, plus listed versions 2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1 Show 21 moreShow less2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm142:7.4.1689-3ubuntu1.5+esm15 |
2:7.4.1689-3ubuntu1.5+esm17 |
vimUbuntu:18.04:LTS From an advisory covering 9 CVEs |
before 2:8.0.1453-1ubuntu1.11, plus listed versions 2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3 Show 9 moreShow less2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.10 |
2:8.0.1453-1ubuntu1.11 |
vimUbuntu:20.04:LTS From an advisory covering 9 CVEs |
before 2:8.1.2269-1ubuntu5.12, plus listed versions 2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4 Show 8 moreShow less2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.11 |
2:8.1.2269-1ubuntu5.12 |
vimUbuntu:22.04:LTS From an advisory covering 9 CVEs |
before 2:8.2.3995-1ubuntu2.4, plus listed versions 2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3 Show 5 moreShow less2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.3 |
2:8.2.3995-1ubuntu2.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-47024 is a high vulnerability (CVSS 7.8) in Vim, published January 20, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 18th percentile. Fixed in vim 9.0.0999-r0.
References
github.com/vim/vim/commit/a63ad78ed31e36dbdf3a9cd28071dcdbefce7d19
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M
security.gentoo.org/glsa/202305-16
nvd.nist.gov/vuln/detail/CVE-2022-47024
lists.fedoraproject.org/archives/list/[email protected]/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M
Show 33 moreShow less
lists.fedoraproject.org/archives/list/[email protected]/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC
github.com/advisories/GHSA-5jpw-hxh6-542f
security.alpinelinux.org/vuln/CVE-2022-47024
access.redhat.com/errata/RHSA-2023:0958
access.redhat.com/security/cve/CVE-2022-47024
bugzilla.redhat.com/2163613
errata.almalinux.org/9/ALSA-2023-0958.html
docs.bell-sw.com/security/cves/CVE-2022-47024
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1680210210
github.com/CVEProject/cvelistV5/tree/main/cves/2022/47xxx/CVE-2022-47024.json
security-tracker.debian.org/tracker/CVE-2022-47024
advisories.mageia.org/MGASA-2023-0075.html
bugs.mageia.org/show_bug.cgi?id=31490
ubuntu.com/security/notices/USN-5836-1
lists.opensuse.org/archives/list/[email protected]/thread/YTSMWBSYCUOQ5M745FWM6JT2JSX5KYBG
lists.fedoraproject.org/archives/list/[email protected]/thread/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1061
nvd.nist.gov/vuln/detail/CVE-2023-0288
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2163613
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0958.json
cve.org/CVERecord?id=CVE-2022-47024
errata.rockylinux.org/RLSA-2023:0958
ubuntu.com/security/CVE-2022-47024
ubuntu.com/security/notices/USN-5963-1
ubuntu.com/security/CVE-2023-0049
ubuntu.com/security/CVE-2023-0054
ubuntu.com/security/CVE-2023-0288
ubuntu.com/security/CVE-2023-0433
ubuntu.com/security/CVE-2023-0051
ubuntu.com/security/CVE-2023-1170
ubuntu.com/security/CVE-2023-1175
ubuntu.com/security/CVE-2023-1264