{"id":"CVE-2022-1629","aliases":["ALPINE-CVE-2022-1629","ALSA-2022:5242","ALSA-2022:5319","AZL-9706","BELL-CVE-2022-1629","CLSA-2022-1653006752","CLSA-2022-1653328424","CLSA-2022-1653329020","CLSA-2026-1777545655","CLSA-2026-1777558504","DEBIAN-CVE-2022-1629","EUVD-2022-24918","GHSA-pcg2-vhm9-hhqc","MGASA-2022-0203","OESA-2022-1668","RHSA-2022:5242","RHSA-2022:5319","RLSA-2022:5319","UBUNTU-CVE-2022-1629","USN-5498-1","USN-5995-1","openSUSE-SU-2024:12337-1"],"status":"published","title":"Buffer Over-read in function find_next_quote in vim/vim","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","severity":{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01911,"percentile":0.79956,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-126"],"published":"2022-05-10T00:00:00Z","modified":"2026-11-03T08:00:59Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vim","fixed_in":["8.2.4969-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"vim","fixed_in":["8.2.4925-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","fixed_in":["2:7.4.052-1ubuntu3.1+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","fixed_in":["2:7.4.1689-3ubuntu1.5+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"vim","fixed_in":["2:8.0.1453-1ubuntu1.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"vim","fixed_in":["2:8.1.2269-1ubuntu5.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"vim","fixed_in":["2:8.2.3995-1ubuntu2.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4969-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4925-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els12"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els8"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4975-1.mga8"}]}],"bundled":31},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-27.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-27.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-34.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8_6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm8"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm8"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.12"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.13"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.5"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm8"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm8"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.12"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.13"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.5"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4"],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0453-2.1"}]}],"bundled":84}],"products":[{"vendor":"apple","product":"macos"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"vim","product":"vim"},{"vendor":"vim","product":"vim/vim"}],"references":[{"url":"https://huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee","tags":["x_transferred","Exploit","Third Party Advisory","web","article","report"]},{"url":"https://github.com/vim/vim/commit/53a70289c2712808e6d4e88927e03cac01b470dd","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202208-32","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT213488","tags":["x_transferred","Third Party Advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/41","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/28","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://security.gentoo.org/glsa/202305-16","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1629","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/"},{"url":"https://github.com/advisories/GHSA-pcg2-vhm9-hhqc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-1629","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5242","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0554","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0943","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1154","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1420","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1621","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1629","tags":["report"]},{"url":"https://bugzilla.redhat.com/2058483","tags":["report"]},{"url":"https://bugzilla.redhat.com/2064064","tags":["report"]},{"url":"https://bugzilla.redhat.com/2073013","tags":["report"]},{"url":"https://bugzilla.redhat.com/2077734","tags":["report"]},{"url":"https://bugzilla.redhat.com/2083924","tags":["report"]},{"url":"https://bugzilla.redhat.com/2083931","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-5242.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5319","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-5319.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-1629","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1653006752.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1653328424.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1653329020","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777545655.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777558504.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1629.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1629","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0203.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29972","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/7JBXG3MU6EZWJGJD6UTHHONHGJBYPQQT/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UCWG5L6CRQWACGVP7CYGESUB3G6QJ3GS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4GOY5YWTP5QUY2EFLCL7AUWA2CV57C37/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UURGABNDL77YR5FRQKTFBYNBDQX2KO7Q/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HBUYQBZ6GWAWJRWP7AODJ4KHW5BCKDVP/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FDNZ3N5S7UGKPUUKPGOQQGPJJK3YTW37/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2022/dla-3011","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083924","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1620","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1674","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083931","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5242.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0554","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0943","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1154","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1420","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1621","tags":["advisory"]},{"url":"https://huntr.dev/bounties/520ce714-bfd2-4646-9458-f52cd22bb2fb","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1629","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5319.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5319","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1629","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5498-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5995-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2980","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3153","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-1629","title":"Buffer Over-read in function find_next_quote in vim/vim","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-10T00:00:00Z","modified":"2024-08-03T00:10:03.941Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T14:34:38.581997Z"}],"euvd":[{"id":"EUVD-2022-24918","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-10T00:00:00Z","modified":"2024-08-03T00:10:03Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T03:26:01.010049Z"}],"ghsa":[{"id":"GHSA-pcg2-vhm9-hhqc","title":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This...","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-11T00:01:38Z","modified":"2023-05-12T05:00:25Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125","CWE-126"],"updated_at":"2026-11-02T14:54:35.04449Z"}],"nvd":[{"id":"CVE-2022-1629","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-10T14:15:08.53Z","modified":"2026-06-17T04:22:49.3Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-126","CWE-125"],"updated_at":"2026-11-02T14:07:19.51203Z"}],"osv":[{"id":"ALPINE-CVE-2022-1629","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-10T14:15:08.53Z","modified":"2026-11-03T07:30:48.483673459Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-9706","title":"CVE-2022-1629 affecting package vim for versions less than 8.2.4925-1","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-10T14:15:08Z","modified":"2026-04-21T04:35:07.242645Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.313414Z"},{"id":"BELL-CVE-2022-1629","title":"CVE-2022-1629 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:51.990359Z","modified":"2026-01-26T09:47:43.795658Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-1629","title":"Buffer Over-read in function find_next_quote in vim/vim","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-10T00:00:00Z","modified":"2026-10-28T10:28:44.078591142Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DEBIAN-CVE-2022-1629","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-10T14:15:08.53Z","modified":"2026-11-03T08:00:59.041707681Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2022-1668","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\n\nSecurity Fix(es):\n\nHeap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution.(CVE-2022-1619)\n\nNULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.(CVE-2022-1620)\n\nHeap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution.(CVE-2022-1621)\n\nBuffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution.(CVE-2022-1629)\n\nNULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.(CVE-2022-1674)","status":"published","published":"2022-05-23T11:04:56Z","modified":"2026-08-18T01:16:33.140456974Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:5242","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2024-09-16T07:56:51Z","modified":"2026-06-26T12:22:18.212075132Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5319","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2024-09-16T07:56:42Z","modified":"2026-06-26T12:21:17.597394071Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:5319","title":"Moderate: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: heap buffer overflow (CVE-2022-1621)\n\n* vim: buffer over-read (CVE-2022-1629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-06-28T10:52:18Z","modified":"2026-02-04T07:40:25.901895Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-1629","description":"Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution","status":"published","published":"2022-05-10T14:15:00Z","modified":"2026-02-04T02:18:43.256157Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:5242","title":"Moderate: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\nSecurity Fix(es):\n* vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554)\n* vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943)\n* vim: Out-of-range Pointer Offset (CVE-2022-1420)\n* vim: heap buffer overflow (CVE-2022-1621)\n* vim: buffer over-read (CVE-2022-1629)\n* vim: use after free in utf_ptr2char (CVE-2022-1154)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-07-01T00:00:00Z","modified":"2026-10-29T11:31:11.505189124Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:5319","title":"Moderate: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\nSecurity Fix(es):\n* vim: heap buffer overflow (CVE-2022-1621)\n* vim: buffer over-read (CVE-2022-1629)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-06-30T00:00:00Z","modified":"2026-10-29T11:01:07.794045011Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2022-1653006752","title":"Fixed CVEs in vim: CVE-2022-1620, CVE-2022-1616, CVE-2022-1629, CVE-2022-1621, CVE-2022-1619","description":"- CVE-2022-1619: fix going before the command line start with latin1 encoding\n- CVE-2022-1620: fix NULL pointer dereference when using invalig regexp\n- CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood\n- CVE-2022-1629: fix reading past end of line if ended with trailing backslash\n- CVE-2022-1616: fix buffer overflow with invalid command with composing chars","status":"published","published":"2022-05-20T00:32:32Z","modified":"2026-10-21T10:47:42.856952239Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1653328424","title":"Fixed CVEs in vim: CVE-2022-1616, CVE-2022-1621, CVE-2022-1620, CVE-2022-1629, CVE-2022-1619","description":"- CVE-2022-1619: fix going before the command line start with latin1 encoding\n- CVE-2022-1620: fix NULL pointer dereference when using invalig regexp\n- CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood\n- CVE-2022-1629: fix reading past end of line if ended with trailing backslash\n- CVE-2022-1616: fix buffer overflow with invalid command with composing chars","status":"published","published":"2022-05-23T17:53:44Z","modified":"2026-10-21T10:48:24.108691803Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1653329020","title":"Fix CVE(s): CVE-2022-1629, CVE-2022-1616, CVE-2022-1620, CVE-2022-1621, CVE-2022-1619","description":"\n   * SECURITY UPDATE: Going before the start of the command line\n     - debian/patches/CVE-2022-1619.patch: Check already being at\n       the start of the command line\n     - CVE-2022-1619\n   * SECURITY UPDATE: NULL pointer access when using invalid pattern\n     - debian/patches/CVE-2022-1620.patch: Check for failed regexp program\n     - CVE-2022-1620\n   * SECURITY UPDATE: Can add invalid bytes with :spellgood\n     - debian/patches/CVE-2022-1621.patch: Check for a valid word string\n     - CVE-2022-1621\n   * SECURITY UPDATE: Trailing backslash may cause reading past end of line\n     - debian/patches/CVE-2022-1629.patch: Check for NUL after backslash\n     - CVE-2022-1629\n   * SECURITY UPDATE: Buffer overflow with invalid command with composing chars\n     - debian/patches/CVE-2022-1616.patch: Check that the whole character fits\n       in the buffer\n     - CVE-2022-1616","status":"published","published":"2022-05-23T18:03:40Z","modified":"2026-06-04T10:03:42.793518859Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2026-1777545655","title":"vim: Fix of 10 CVEs","description":"- CVE-2021-3928: in suggest_trie_walk() only credit a non-word-char\n  boundary with SCORE_NONWORD when preword is non-empty, so spell\n  suggestions do not read uninitialized memory behind preword.\n- CVE-2021-3974: in nfa_regmatch() NFA_MARK / NFA_MARK_GT /\n  NFA_MARK_LT, save reginput - regline and re-fetch regline via\n  reg_getline() after getmark_buf() so use-after-free cannot occur\n  when getmark_buf flushes the current line.\n- CVE-2022-0368: call check_pos(curbuf, \u0026VIsual) at the end of\n  u_undo_end() when Visual mode is active, so an undo that shortens\n  the buffer cannot leave VIsual pointing past end-of-line / end-\n  of-buffer. Adds a check_pos() helper in misc2.c.\n- CVE-2022-0696: in win_new_tabpage() and goto_tabpage_tp(),\n  refuse to switch/create a tabpage while cmdwin_type != 0,\n  emitting e_cmdwin instead of crashing on cmdline-window re-entry.\n- CVE-2022-1629: in find_next_quote(), after advancing past an\n  escape character return -1 if the next byte is NUL so a trailing\n  backslash cannot be read past end-of-line.\n- CVE-2022-1735: call new check_visual_pos() helper from\n  changed_common() (misc1.c) and stop_insert() (edit.c) whenever\n  Visual mode is active so a change that shrinks the buffer cannot\n  leave VIsual pointing past end-of-line / end-of-buffer.\n- CVE-2022-1771: cap getcmdline() recursion at 50 via a static\n  depth counter, emitting E169 \"Command too recursive\" on overflow\n  to prevent crash from self-recursive cmdline input (e.g. the \"=@\"\n  register loop).\n- CVE-2022-1898: in nv_brackets(), copy the identifier under the\n  cursor with vim_strnsave() before calling find_pattern_in_path()\n  for \"]d\"/\"[d\", so that a match in a modified/freed line cannot\n  cause a use-after-free on ptr.\n- CVE-2022-1968: add get_line_and_copy() helper in search.c and\n  use it instead of ml_get() in find_pattern_in_path(), so the\n  regexp cannot leave line pointing into freed buffer memory when\n  a mark invalidates the current line.\n- CVE-2022-2124: in current_quote() (search.c), break out of the\n  selection-scan loop when line[i] is NUL so a changed line does\n  not cause a read past end-of-line while iterating up to col_end.","status":"published","published":"2026-04-30T10:41:00Z","modified":"2026-06-01T00:33:27.315252436Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777558504","title":"vim: Fix of 10 CVEs","description":"- CVE-2021-3928: in suggest_trie_walk() only credit a non-word-char\n  boundary with SCORE_NONWORD when preword is non-empty, so spell\n  suggestions do not read uninitialized memory behind preword.\n- CVE-2021-3974: in nfa_regmatch() NFA_MARK / NFA_MARK_GT /\n  NFA_MARK_LT, save reginput - regline and re-fetch regline via\n  reg_getline() after getmark_buf() so use-after-free cannot occur\n  when getmark_buf flushes the current line.\n- CVE-2022-0368: call check_pos(curbuf, \u0026VIsual) at the end of\n  u_undo_end() when Visual mode is active, so an undo that shortens\n  the buffer cannot leave VIsual pointing past end-of-line / end-\n  of-buffer. Adds a check_pos() helper in misc2.c.\n- CVE-2022-0696: in win_new_tabpage() and goto_tabpage_tp(),\n  refuse to switch/create a tabpage while cmdwin_type != 0,\n  emitting e_cmdwin instead of crashing on cmdline-window re-entry.\n- CVE-2022-1629: in find_next_quote(), after advancing past an\n  escape character return -1 if the next byte is NUL so a trailing\n  backslash cannot be read past end-of-line.\n- CVE-2022-1735: call new check_visual_pos() helper from\n  changed_common() (misc1.c) and stop_insert() (edit.c) whenever\n  Visual mode is active so a change that shrinks the buffer cannot\n  leave VIsual pointing past end-of-line / end-of-buffer.\n- CVE-2022-1771: cap getcmdline() recursion at 50 via a static\n  depth counter, emitting E169 \"Command too recursive\" on overflow\n  to prevent crash from self-recursive cmdline input (e.g. the \"=@\"\n  register loop).\n- CVE-2022-1898: in nv_brackets(), copy the identifier under the\n  cursor with vim_strnsave() before calling find_pattern_in_path()\n  for \"]d\"/\"[d\", so that a match in a modified/freed line cannot\n  cause a use-after-free on ptr.\n- CVE-2022-1968: add get_line_and_copy() helper in search.c and\n  use it instead of ml_get() in find_pattern_in_path(), so the\n  regexp cannot leave line pointing into freed buffer memory when\n  a mark invalidates the current line.\n- CVE-2022-2124: in current_quote() (search.c), break out of the\n  selection-scan loop when line[i] is NUL so a changed line does\n  not cause a read past end-of-line while iterating up to col_end.","status":"published","published":"2026-05-05T21:11:17Z","modified":"2026-06-01T00:33:18.677667356Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"MGASA-2022-0203","title":"Updated vim packages fix security vulnerability","description":"vim is vulnerable to out of bounds read (CVE-2022-0213)\nHeap-based Buffer Overflow in block_insert() in src/ops.c (CVE-2022-0261)\na heap-based OOB read of size 1 (CVE-2022-0128)\nheap-based buffer overflow in utf_head_off() in mbyte.c (CVE-2022-0318)\naccess of memory location before start of buffer (CVE-2022-0351)\nheap-based buffer overflow in init_ccline() in ex_getln.c (CVE-2022-0359)\nStack-based Buffer Overflow in spellsuggest.c (CVE-2022-0408)\nuse after free in src/ex_cmds.c (CVE-2022-0413)\nout-of-bounds read in delete_buff_tail() in getchar.c (CVE-2022-0393)\nheap-based-buffer-overflow in ex_retab() of src/indent.c (CVE-2022-0417)\nheap-use-after-free in enter_buffer() of src/buffer.c (CVE-2022-0443)\nheap overflow in ex_retab() may lead to crash (CVE-2022-0572)\nStack-based Buffer Overflow in vim prior to 8.2. (CVE-2022-0629)\nNULL Pointer Dereference in vim prior to 8.2 (CVE-2022-0696)\nbuffer overflow (CVE-2022-0714)\nUse of Out-of-range Pointer Offset (CVE-2022-0729)\nUse of Out-of-range Pointer Offset in vim (CVE-2022-0685)\nUse of Out-of-range Pointer Offset in vim (CVE-2022-0554)\nHeap-based Buffer Overflow occurs in vim (CVE-2022-0943)\nheap buffer overflow in get_one_sourceline (CVE-2022-1160)\nuse after free in utf_ptr2char (CVE-2022-1154)\nglobal heap buffer overflow in skip_range (CVE-2022-1381)\nOut-of-range Pointer Offset (CVE-2022-1420)\nheap-buffer-overflow in append_command of src/ex_docmd.c (CVE-2022-1616)\nheap-buffer-overflow in cmdline_erase_chars of ex_getln.c (CVE-2022-1619)\nNULL Pointer Dereference in vim_regexec_string() of regexp.c (CVE-2022-1620)\nheap buffer overflow (CVE-2022-1621)\nbuffer over-read (CVE-2022-1629)\nNULL pointer dereference in vim_regexec_string() of regexp.c (CVE-2022-1674)\na buffer over-read found in scriptfile.c (CVE-2022-1769)\nHeap-based Buffer Overflow in cindent.c (CVE-2022-1733)\n","status":"published","published":"2022-05-25T18:46:18Z","modified":"2026-04-16T04:40:48.788777154Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12337-1","title":"gvim-9.0.0453-2.1 on GA media","description":"These are all security issues fixed in the gvim-9.0.0453-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:47.347126Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"USN-5498-1","title":"vim vulnerabilities","description":"It was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code.\n","status":"published","published":"2022-06-30T14:54:40Z","modified":"2026-06-25T13:31:16.612420718Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5995-1","title":"vim vulnerabilities","description":"It was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nand Ubuntu 22.04 LTS. (CVE-2022-0413, CVE-2022-1629, CVE-2022-1674,\nCVE-2022-1733, CVE-2022-1735, CVE-2022-1785, CVE-2022-1796, CVE-2022-1851,\nCVE-2022-1898, CVE-2022-1942, CVE-2022-1968, CVE-2022-2124, CVE-2022-2125,\nCVE-2022-2126, CVE-2022-2129, CVE-2022-2175, CVE-2022-2183, CVE-2022-2206,\nCVE-2022-2304, CVE-2022-2345, CVE-2022-2581)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1720, CVE-2022-2571, CVE-2022-2845, CVE-2022-2849,\nCVE-2022-2923)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-1927,\nCVE-2022-2344)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nand Ubuntu 22.10. (CVE-2022-2946)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-2980)\n","status":"published","published":"2023-04-04T08:58:38Z","modified":"2026-06-29T13:50:52.237717209Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}