CLSA-2022-1654804099

    Dashboard / Vulnerabilities / CLSA-2022-1654804099

    CLSA-2022-1654804099

    Published: 9 Jun 2022Last Modified: 4 Jun 2026

    Summary: Fix CVE(s): CVE-2022-1851, CVE-2022-1886, CVE-2022-0319, CVE-2022-1898

    Details: * SECURITY UPDATE: ml_get() error when exchanging windows in Visual mode - debian/patches/CVE-2022-0319.patch: Correct end of Visual area when entering another buffer - CVE-2022-0319 * SECURITY UPDATE: Cursor may be in an invalid position after text formatting - debian/patches/CVE-2022-1851.patch: Correct the cursor position after formatting - CVE-2022-1851 * SECURITY UPDATE: Access before start of text with a put command - debian/patches/CVE-2022-1886.patch: Check the length is more than zero - CVE-2022-1886 * SECURITY UPDATE: Using freed memory with "]d". - debian/patches/CVE-2022-1898: Copy the pattern before searching - CVE-2022-1898

    References: https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1654804099

    Affected packages

    Package

    Name: vim

    Purl: pkg:deb/tuxcare/vim?distro=ubuntu-16.04

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3:7.4.1689-3ubuntu1.5+tuxcare.els16

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CLSA-2022-1654804099 | CVE-DB