Description
Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | vim | 2:8.1.2136-1 | — |
| Debian 13 | vim | 2:8.1.2136-1 | — |
| Debian 12 | vim | 2:8.1.2136-1 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | vim-X11 +4 | 2:8.2.3642-1.amzn2.0.1 | ALAS2-2021-1728 |
Advisories 2
- ALAS2-2021-1728 Moderate: vim security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 9, 2024
- WID-SEC-2023-1520 vim: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jul 3, 2023