VDB

ALPINE-CVE-2022-4292

ALPINE-CVE-2022-4292 PUBLISHED CVSS 7.800000190734863 HIGH

Record from OSV · Published December 5, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0882.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
vimAlpine:v3.239.0.0999-r0
vimAlpine:v3.189.0.0999-r0
vimAlpine:v3.209.0.0999-r0
vimAlpine:v3.219.0.0999-r0
vimAlpine:v3.229.0.0999-r0
vimAlpine:v3.199.0.0999-r0

Risk scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersions
Alpine:v3.23vim0, 7.2.284-r0, 7.2.394-r0
Alpine:v3.18vim9.0.0792-r0, 7.2.394-r1, 7.2.411-r0
Alpine:v3.20vim0, 8.1.0077-r0, 7.4-r1
Alpine:v3.21vim8.2.4836-r0, 0, 7.2.284-r0
Alpine:v3.22vim7.3.515-r0, 8.2.3082-r0, 8.2.0-r0
Alpine:v3.19vim0, 7.2.394-r0, 7.2.394-r1

Timeline

  • Dec 5, 2022 CVE Published
  • Jun 15, 2026 CVE Updated
  • Aug 8, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ALPINE-CVE-2022-4292
vulnetix vdb fixes ALPINE-CVE-2022-4292

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ALPINE-CVE-2022-4292/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›