Description
vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | vim | 2:8.2.2367-1 | — |
| Debian 13 | vim | 2:8.2.2367-1 | — |
| Debian 12 | vim | 2:8.2.2367-1 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | xxd +6 | 2:9.0.1882-1.amzn2.0.1 | ALAS2-2023-2266 |
Advisories 2
- ALAS2-2023-2266 Important: vim security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 5, 2023
- WID-SEC-2023-2049 vim: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Oct 5, 2023