Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Mageia: 2022-0464 Moderate: Vim Buffer Overflow Threat Mitigated

mageia
Calendar Grey December 13, 2022
Dist Mageia Esm H88
Buffer overrun in vim resolved in Mageia 8 patch. Critical for safeguarding users from potential threats. Find more information here.
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command

Summary

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. (CVE-2022-4141)

References

- https://bugs.mageia.org/show_bug.cgi?id=31239

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/AZ3JMSUCR6Y7626RDWQ2HNSUFIQOJ33G/

- https://www.cve.org/CVERecord?id=CVE-2022-4141

Resolution

SRPMS

- 8/core/vim-9.0.963-1.mga8

Publication date: 13 Dec 2022
URL: https://advisories.mageia.org/MGASA-2022-0464.html
Type: security
CVE: CVE-2022-4141

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here