Skip to content
OpenAdvisories
Medium ALAS2-2023-1912 1 CVE

Moderate: vim security update (Amazon Linux 2)

Published Jan 18, 2023 · Updated Jan 20, 2023

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-4141: The target's backtrace indicates that libc has detected a heap error or that the target was executing a heap function when it stopped. This could be due to heap corruption, passing a bad pointer to a heap function such as free(), etc. Since heap errors might include buffer overflows, use-after-free situations, etc. they are generally considered exploitable.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 vim-common 2:9.0.1006-1.amzn2.0.1
Amazon Linux · 2 vim-data 2:9.0.1006-1.amzn2.0.1
Amazon Linux · 2 vim-debuginfo 2:9.0.1006-1.amzn2.0.1
Amazon Linux · 2 vim-enhanced 2:9.0.1006-1.amzn2.0.1
Amazon Linux · 2 vim-filesystem 2:9.0.1006-1.amzn2.0.1
Amazon Linux · 2 vim-minimal 2:9.0.1006-1.amzn2.0.1
Amazon Linux · 2 vim-X11 2:9.0.1006-1.amzn2.0.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-4141.html