CVE:CVE-2022-1620
CNNVD:CNNVD-202205-2617
Vim是一款跨平台的文本编辑器。
Vim 8.2之前版本存在代码问题漏洞，该漏洞源于regexp.c:2729的vim_regexec_string函数中NULL指针取消引用。攻击者利用该漏洞通过特制的输入导致拒绝服务（应用程序崩溃）。
solution:Upgrade vim vim to a higher version than 8.2.4901,and avoid the version (,8.2.4901); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade apple macos to a higher version than 13.0,and avoid the version (,13.0)