CVE catalog

CVE-2022-2000

vim: CVE-2022-2000

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.60% · Oct 25, 2026

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianvimsid2:9.2.0858-1fixed
Debianvimforky2:9.2.0858-1fixed
Debianvimtrixie2:9.1.1230-2fixed
Debianvimbookworm2:9.0.1378-2+deb12u2fixed
Ubuntuvimpro2:7.4.712-2ubuntu4vulnerable
Ubuntuvimpro2:7.4.826-1ubuntu1vulnerable
Ubuntuvimpro2:7.4.826-1ubuntu2vulnerable
Ubuntuvimpro2:7.4.826-1ubuntu3vulnerable
Ubuntuvimpro2:7.4.963-1ubuntu1vulnerable
Ubuntuvimpro2:7.4.963-1ubuntu4vulnerable
Ubuntuvimpro2:7.4.963-1ubuntu5vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.1vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.2vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.3vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.4vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm2vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm3vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm4vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm5vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm6vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm7vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm8vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm10vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm11fixed
Ubuntuvimpro2:8.0.0197-4ubuntu5vulnerable
Ubuntuvimpro2:8.0.1144-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu2vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.4vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.6vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.7vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.8vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.9vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.10vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.11vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.12vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm4vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm5vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm6vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm7fixed
Ubuntuvim20.042:8.1.0875-5ubuntu2vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu3vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu1vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.3vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.6vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.7vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.8vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.9vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.11vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.12vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.13vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.14vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.15vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.16vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.17vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.18vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.20vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.21fixed
Ubuntuvim22.042:8.2.2434-3ubuntu3vulnerable
Ubuntuvim22.042:8.2.2434-3ubuntu4vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu1vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu2vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu3vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu5vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu1vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.1vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.3vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.4vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.5vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.7vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.8vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.9vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.10vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.11vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.12vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.13vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.15fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianvimsourcesid2:9.0.0135-1not yet assignedNot reported[1015984]
Debianvimsourceforky2:9.0.0135-1not yet assignedNot reported[1015984]
Debianvimsourcetrixie2:9.0.0135-1not yet assignedNot reported[1015984]
Debianvimsourcebookworm2:9.0.0135-1not yet assignedNot reported[1015984]
Ubuntuvimdebpro2:7.4.1689-3ubuntu1.5+esm11Not reportedUSN-5516-1Not reported
Ubuntuvimdebpro2:8.0.1453-1ubuntu1.13+esm7Not reportedUBUNTU-CVE-2022-2000Not reported
Ubuntuvimdeb20.042:8.1.2269-1ubuntu5.21Not reportedUBUNTU-CVE-2022-2000Not reported
Ubuntuvimdeb22.042:8.2.3995-1ubuntu2.15Not reportedUBUNTU-CVE-2022-2000Not reported

[Debian bug #1015984]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [vim]Fixed
    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-athena]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-common]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-doc]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-gtk3]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-gui-common]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-motif]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-nox]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-runtime]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [vim-tiny]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

  • [xxd]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0135-1

      dsa · vim · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]