CVE catalog

CVE-2022-3705

vim: CVE-2022-3705

[CVE catalog]

Severity
Medium · CVSS 5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.67% · Oct 25, 2026

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianvimsid2:9.2.0858-1fixed
Debianvimforky2:9.2.0858-1fixed
Debianvimtrixie2:9.1.1230-2fixed
Debianvimbookworm2:9.0.1378-2+deb12u2fixed
Ubuntuvimpro2:8.0.0197-4ubuntu5vulnerable
Ubuntuvimpro2:8.0.1144-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu2vulnerable
Ubuntuvimpro2:8.0.1401-1ubuntu3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.4vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.6vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.7vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.8vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.9vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.10vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.11vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.12vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm1vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm3vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm4vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm5vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm6vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm7vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm8vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm9vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm10vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm11vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm12vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm13vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm14vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm15vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm16vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm17vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm18vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm19vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm20vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm21vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm22vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm23vulnerable
Ubuntuvimpro2:8.0.1453-1ubuntu1.13+esm24vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu2vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu3vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu1vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.3vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.6vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.7vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.8vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.9vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.11vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.12vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.13vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.14vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.15vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.16vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.17vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.18fixed
Ubuntuvim22.042:8.2.2434-3ubuntu3vulnerable
Ubuntuvim22.042:8.2.2434-3ubuntu4vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu1vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu2vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu3vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu5vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu1vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.1vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.3vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.4vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.5vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.7vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.8vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.9vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.10vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.11vulnerable
Ubuntuvim22.042:8.2.3995-1ubuntu2.12fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianvimsourcesid2:9.0.0813-1unimportantNot reportedNot reported
Debianvimsourceforky2:9.0.0813-1unimportantNot reportedNot reported
Debianvimsourcetrixie2:9.0.0813-1unimportantNot reportedNot reported
Debianvimsourcebookworm2:9.0.0813-1unimportantNot reportedNot reported
Ubuntuvimdeb20.042:8.1.2269-1ubuntu5.18Not reportedUBUNTU-CVE-2022-3705Not reported
Ubuntuvimdeb22.042:8.2.3995-1ubuntu2.12Not reportedUBUNTU-CVE-2022-3705Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [vim]Fixed
    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-athena]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-common]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-doc]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-gtk3]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-gui-common]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-motif]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-nox]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-runtime]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [vim-tiny]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

  • [xxd]Fixed

    Source package: [vim]

    Details (2)

    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:9.0.0813-1

      dsa · vim · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]