Lucene search

K
oraclelinuxOracleLinuxELSA-2022-0894
HistoryMar 16, 2022 - 12:00 a.m.

vim security update

2022-03-1600:00:00
linux.oracle.com
29

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

[8.0.1763-16.0.1]

    • Remove upstream references [Orabug: 31197557]
      [2:8.0.1763-16.12]
  • CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository
    [2:8.0.1763-16.11]
  • CVE-2022-0413 vim: use after free in src/ex_cmds.c
  • Fix specfile problems
  • Resolves: rhbz#2048525
    [2:8.0.1763-16.10]
  • CVE-2022-0413 vim: use after free in src/ex_cmds.c
  • Resolves: rhbz#2048525
    [2:8.0.1763-16.9]
  • CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  • Improve fix
  • Resolves: rhbz#2049403
    [2:8.0.1763-16.8]
  • CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  • Resolves: rhbz#2049403
    [2:8.0.1763-16.7]
  • CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c
    [2:8.0.1763-16.6]
  • fix test suite after fix for CVE-2022-0318
    [2:8.0.1763-16.5]
  • CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  • CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P