Linux · Ubuntu · Package update · August 25, 2022

vim-common 2:8.2.3995-1ubuntu2.5: vim-common 2:8.2.3995-1ubuntu2.5 for Ubuntu 22.04.1 LTS (jammy)

vim-common 2:8.2.3995-1ubuntu2.5, released August 25, 2022, fixes 30 CVEs in vim-common. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
30
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0218
82nd percentile

Priority of the 30 CVEs

Patch now 0 Urgent 0 High 27 Routine 3

Fixed package versions

ProductReleaseFixed in
vim-commonUbuntu 22.04.1 LTS (jammy)2:8.2.3995-1ubuntu2.5

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-1720 vim: Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.49567.8 0.0218 None reported
High CVE-2022-1629 vim-common: vim: buffer over-read7.8 0.0191 None reported
High CVE-2022-1927 vim-common: vim: buffer over-read in utf_ptr2char() in mbyte.c9.8 0.0166 None reported
High CVE-2022-2125 vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.7.8 0.0164 None reported
High CVE-2022-1851 vim: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.7.8 0.0163 None reported
High CVE-2022-1942 vim-runtime: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.7.8 0.0162 None reported
High CVE-2022-2124 vim-runtime: Buffer Over-read in GitHub repository vim/vim prior to 8.2.7.8 0.0156 None reported
High CVE-2022-2126 vim-athena: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.7.8 0.0156 None reported
High CVE-2022-2183 vim: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.7.8 0.0152 None reported
High CVE-2022-2304 vim: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.7.8 0.0150 None reported
High CVE-2022-1898 xxd: Use After Free in GitHub repository vim/vim prior to 8.2.7.8 0.0146 None reported
High CVE-2022-2129 vim: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.7.8 0.0141 None reported
High CVE-2022-1968 vim-runtime: Use After Free in GitHub repository vim/vim prior to 8.2.7.8 0.0141 None reported
High CVE-2022-0413 vim: Use After Free in GitHub repository vim/vim prior to 8.2.7.8 0.0139 None reported
High CVE-2022-2206 vim: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.7.8 0.0136 None reported
High CVE-2022-2175 vim: Buffer Over-read in GitHub repository vim/vim prior to 8.2.7.8 0.0131 None reported
High CVE-2022-1735 vim-nox: Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.7.8 0.0130 None reported
High CVE-2022-2344 vim-common: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.7.8 0.0129 None reported
High CVE-2022-2345 vim: Use After Free in GitHub repository vim/vim prior to 9.0.0046.7.8 0.0127 None reported
High CVE-2022-1796 vim-athena: Use After Free in GitHub repository vim/vim prior to 8.2.4979.7.8 0.0114 None reported
High CVE-2022-1733 vim-runtime: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.7.8 0.0061 None reported
High CVE-2022-2845 vim-athena: Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.7.8 0.0053 None reported
High CVE-2022-2946 vim: Use After Free in GitHub repository vim/vim prior to 9.0.0246.7.8 0.0053 None reported
High CVE-2022-2581 vim-nox: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.7.8 0.0050 None reported
High CVE-2022-1785 vim-gtk: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.7.8 0.0049 None reported
Showing 1 to 25 of 30 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.