Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-34281.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-34281
Upstream
Published
2024-02-05T08:15:44Z
Modified
2026-04-01T05:11:24.998034Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
CVE-2024-22667 affecting package vim for versions less than 9.0.2121-2
Details

Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.

References

Affected packages

Azure Linux:2 / vim

Package

Name
vim
Purl
pkg:rpm/azure-linux/vim

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2121-2

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-34281.json"