Lucene search

K
redhatcveRedhat.comRH:CVE-2022-2000
HistoryJun 15, 2022 - 2:30 p.m.

CVE-2022-2000

2022-06-1514:30:04
redhat.com
access.redhat.com
18

0.002 Low

EPSS

Percentile

55.0%

An out-of-bounds write vulnerability was found in Vim’s append_command() function of the src/ex_docmd.c file. This issue occurs when an error for a command goes over the end of IObuff. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer overflow that causes an application to crash and corrupt memory.

Mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.