{"schemaVersion":3,"id":"USN-5801-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"vim vulnerabilities\n\nIt was discovered that Vim makes illegal memory calls when pasting\nbrackets in Ex mode. An attacker could possibly use this to crash Vim,\naccess or modify memory, or execute arbitrary commands. This issue\naffected only Ubuntu 20.04 and 22.04 (CVE-2022-0392)\n\nIt was discovered that Vim makes illegal memory calls when making\ncertain retab calls. An attacker could possibly use this to crash Vim,\naccess or modify memory, or execute arbitrary commands. (CVE-2022-0417)","dates":{"published":"2023-01-12T21:31:55.000Z","modified":"2026-02-10T04:42:55.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"vim","name":"vim","label":"vim","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/vim","purlType":"deb","versions":[{"text":"< 2:8.0.1453-1ubuntu1.10","noFixRecorded":false,"fixedIn":null},{"text":"< 2:8.1.2269-1ubuntu5.11","noFixRecorded":false,"fixedIn":null},{"text":"< 2:8.2.3995-1ubuntu2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:8.0.1453-1ubuntu1.10 | < 2:8.1.2269-1ubuntu5.11 | < 2:8.2.3995-1ubuntu2.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-5801-1","label":"ubuntu.com/security/notices/USN-5801-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0392","label":"ubuntu.com/security/CVE-2022-0392","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-0417","label":"ubuntu.com/security/CVE-2022-0417","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2022-0392","CVE-2022-0417"],"downstream":[],"duplicates":[],"related":["CVE-2022-0392","CVE-2022-0417"]},"timeline":[{"kind":"published","date":"2023-01-12T21:31:55.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T04:42:55.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:44:52.508Z","stale":false,"partial":false}}