{"schemaVersion":3,"id":"USN-6302-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"vim vulnerabilities\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possibly execute arbitrary code. This\nissue only affected Ubuntu 22.04 LTS. (CVE-2022-2522, CVE-2022-2580,\nCVE-2022-2817, CVE-2022-2819, CVE-2022-2862, CVE-2022-2889, CVE-2022-2982,\nCVE-2022-3134)\n\nIt was discovered that Vim did not properly perform bounds checks in the\ndiff mode in certain situations. An attacker could possibly use this issue\nto cause a denial of service. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-2598)\n\nIt was discovered that Vim did not properly perform bounds checks in\ncertain situations. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2022-2816)\n\nIt was discovered that Vim incorrectly handled memory when skipping\ncompiled code. An attacker could possibly use this issue to cause a denial\nof service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-2874)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possibly execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-3016,\nCVE-2022-3037)\n\nIt was discovered that Vim incorrectly handled memory when invalid line\nnumber on \":for\" is ignored. An attacker could possibly use this issue to\ncause a denial of service. (CVE-2022-3099)\n\nIt was discovered that Vim incorrectly handled memory when passing invalid\narguments to the assert_fails() method. An attacker could possibly use this\nissue to cause a denial of service. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-3153)","dates":{"published":"2023-08-21T05:45:06.000Z","modified":"2026-06-29T13:50:56.546Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"vim","name":"vim","label":"vim","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/vim","purlType":"deb","versions":[{"text":"< 2:7.4.052-1ubuntu3.1+esm12","noFixRecorded":false,"fixedIn":null},{"text":"< 2:8.0.1453-1ubuntu1.13+esm4","noFixRecorded":false,"fixedIn":null},{"text":"< 2:8.1.2269-1ubuntu5.17","noFixRecorded":false,"fixedIn":null},{"text":"< 2:8.2.3995-1ubuntu2.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:7.4.052-1ubuntu3.1+esm12 | < 2:8.0.1453-1ubuntu1.13+esm4 | < 2:8.1.2269-1ubuntu5.17 | < 2:8.2.3995-1ubuntu2.11","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-6302-1","label":"ubuntu.com/security/notices/USN-6302-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2522","label":"ubuntu.com/security/CVE-2022-2522","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2580","label":"ubuntu.com/security/CVE-2022-2580","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2598","label":"ubuntu.com/security/CVE-2022-2598","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2816","label":"ubuntu.com/security/CVE-2022-2816","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2817","label":"ubuntu.com/security/CVE-2022-2817","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2819","label":"ubuntu.com/security/CVE-2022-2819","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2862","label":"ubuntu.com/security/CVE-2022-2862","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2874","label":"ubuntu.com/security/CVE-2022-2874","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2889","label":"ubuntu.com/security/CVE-2022-2889","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-2982","label":"ubuntu.com/security/CVE-2022-2982","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-3016","label":"ubuntu.com/security/CVE-2022-3016","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-3037","label":"ubuntu.com/security/CVE-2022-3037","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-3099","label":"ubuntu.com/security/CVE-2022-3099","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-3134","label":"ubuntu.com/security/CVE-2022-3134","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-3153","label":"ubuntu.com/security/CVE-2022-3153","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2022-2522","CVE-2022-2580","CVE-2022-2598","CVE-2022-2816","CVE-2022-2817","CVE-2022-2819","CVE-2022-2862","CVE-2022-2874","CVE-2022-2889","CVE-2022-2982","CVE-2022-3016","CVE-2022-3037","CVE-2022-3099","CVE-2022-3134","CVE-2022-3153"],"downstream":[],"duplicates":[],"related":["CVE-2022-2522","CVE-2022-2580","CVE-2022-2598","CVE-2022-2816","CVE-2022-2817","CVE-2022-2819","CVE-2022-2862","CVE-2022-2874","CVE-2022-2889","CVE-2022-2982","CVE-2022-3016","CVE-2022-3037","CVE-2022-3099","CVE-2022-3134","CVE-2022-3153"]},"timeline":[{"kind":"published","date":"2023-08-21T05:45:06.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T13:50:56.546Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T07:00:16.163Z","stale":false,"partial":false}}