vim-tiny 2:8.0.1453-1ubuntu1.13: vim-tiny 2:8.0.1453-1ubuntu1.13 for Ubuntu 18.04.6 LTS (bionic)

vim-tiny 2:8.0.1453-1ubuntu1.13, released June 27, 2022, fixes 18 CVEs in vim-tiny. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.2647

98th percentile

Priority of the 18 CVEs

Patch now 0
                                Urgent 0
                                High 15
                                Routine 3

Fixed package versions

Product	Release	Fixed in
vim-tiny	Ubuntu 18.04.6 LTS (bionic)	2:8.0.1453-1ubuntu1.13

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2022-0572	vim-tiny: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.	7.8	0.2647	None reported
High	CVE-2022-0318	vim: Heap-based Buffer Overflow in vim/vim prior to 8.2.	9.8	0.0203	None reported
High	CVE-2021-4193	vim-runtime: vim is vulnerable to Out-of-bounds Read	7.8	0.0189	None reported
High	CVE-2021-4192	vim-common: vim: vulnerable to Use After Free	7.8	0.0185	None reported
High	CVE-2022-0685	vim-tiny: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.	7.8	0.0171	None reported
High	CVE-2022-0261	vim-tiny: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.	7.8	0.0168	None reported
High	CVE-2022-0554	vim-common: vim: Use of Out-of-range Pointer Offset in vim prior	7.8	0.0167	None reported
High	CVE-2022-0729	vim-tiny: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.	8.8	0.0162	None reported
High	CVE-2022-0361	vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.	7.8	0.0157	None reported
High	CVE-2022-0368	vim-nox: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.	7.8	0.0152	None reported
High	CVE-2022-0408	vim-athena: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.	7.8	0.0150	None reported
High	CVE-2022-2207	vim-athena: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.	7.8	0.0140	None reported
High	CVE-2022-0443	vim: Use After Free in GitHub repository vim/vim prior to 8.2.	7.8	0.0139	None reported
High	CVE-2022-0359	xxd: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.	7.8	0.0134	None reported
High	CVE-2022-0351	vim: Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.	7.8	0.0061	None reported
Routine	CVE-2022-0714	vim-gtk: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.	5.5	0.1271	None reported
Routine	CVE-2022-0319	vim-gtk3: Out-of-bounds Read in vim/vim prior to 8.2.	5.5	0.0143	None reported
Routine	CVE-2022-0213	vim: vim is vulnerable to Heap-based Buffer Overflow	6.6	0.0135	None reported

Also fixes CVE-2022-0572

ALAS2023-2023-098
vim-common, vim-common-debuginfo, vim-data and 8 more on amzn 2023
vim 2:8.1.2269-1ubuntu5.14
vim on Ubuntu 20.04 LTS (focal)
vim-athena 2:8.1.2269-1ubuntu5.14
vim-athena on Ubuntu 20.04 LTS (focal)
vim-common 2:8.1.2269-1ubuntu5.14
vim-common on Ubuntu 20.04 LTS (focal)
vim-gtk 2:8.1.2269-1ubuntu5.14
vim-gtk on Ubuntu 20.04 LTS (focal)
vim-gtk3 2:8.1.2269-1ubuntu5.14
vim-gtk3 on Ubuntu 20.04 LTS (focal)
vim-gui-common 2:8.1.2269-1ubuntu5.14
vim-gui-common on Ubuntu 20.04 LTS (focal)
vim-nox 2:8.1.2269-1ubuntu5.14
vim-nox on Ubuntu 20.04 LTS (focal)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-vim-tiny-2-8.0.1453-1ubuntu1.13">vim-tiny 2:8.0.1453-1ubuntu1.13 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.