CVE:CVE-2022-4141
CNNVD:CNNVD-202211-3478
Vim是一款跨平台的文本编辑器。
Vim 9.0.0947之前版本存在安全漏洞，该漏洞源于堆损坏、将错误指针传递给诸如 free() 之类的堆函数，攻击者利用该漏洞可以导致缓冲区溢出、释放后重用等情况。
solution:Upgrade vim vim to a higher version than 9.0.0946,and avoid the version (,9.0.0946]; Upgrade fedoraproject fedora to a higher version than 36,37,and avoid the version 36,37