Lucene search
+L

40 matches found

OSV
OSV
added 2022/10/26 12:0 a.m.39 views

CVE-2022-3705 vim autocmd quickfix.c qf_update_buffer use after free

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5CVSS5.5AI score0.01196EPSS
SaveExploits0References12
AlpineLinux
AlpineLinux
added 2022/10/26 12:0 a.m.48 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS6.5AI score0.01196EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/10/06 8:2 a.m.35 views

CVE-2022-3256

A heap use-after-free vulnerability was found in vim's movemark function of the src/mark.c file. This issue occurs because vim uses freed memory when 'autocmd' changes the mark. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free th...

7.8CVSS3.4AI score0.00464EPSS
SaveExploits1References3
OSV
OSV
added 2022/09/29 6:14 p.m.6 views

CLSA-2022-1664475299 Fix CVE(s): CVE-2022-3256

SECURITYUPDATE: Using freed memory when autocmd changes mark - debian/patches/CVE-2022-3256.patch: Copy the mark before editing another buffer - CVE-2022-3256...

7.8CVSS7.1AI score0.00464EPSS
SaveExploits1References1
Veracode
Veracode
added 2022/09/13 1:47 a.m.30 views

Use-After-Free

vim:edge is vulnerable to use-after-free. The vulnerability exist in the getnextvalidentry function in quickfix.c because vim is using freed memory when the location list is changed in autocmd...

7.8CVSS7.5AI score0.00497EPSS
SaveExploits1References8Affected Software1
RedhatCVE
RedhatCVE
added 2022/09/05 9:47 a.m.41 views

CVE-2022-3016

A heap use-after-free vulnerability was found in vim's getnextvalidentry function of the src/quickfix.c file. The issue occurs because vim is using freed memory when the location list is changed in autocmd. This flaw allows an attacker to trick a user into opening a specially crafted file,...

7.8CVSS2.9AI score0.00497EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
added 2020/09/25 7:0 a.m.11 views

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.

...

7.8CVSS7.8AI score0.0191EPSS
SaveExploits0
Mageia
Mageia
added 2020/04/01 1:56 a.m.49 views

Updated vim packages fix security vulnerability

It was discovered that the autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory CVE-2019-20079...

7.8CVSS3AI score0.0191EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.6 views

The vulnerability of the autocmd function (window.c) in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the autocmd function window.c in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.5AI score0.0191EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2020/01/09 6:8 p.m.32 views

CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

7.8CVSS3.5AI score0.0191EPSS
SaveExploits0References3
NVD
NVD
added 2019/12/30 1:15 a.m.17 views

CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

7.8CVSS7.7AI score0.0191EPSS
SaveExploits0References4
OSV
OSV
added 2019/12/30 1:15 a.m.1 views

DEBIAN-CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

7.8CVSS8.3AI score0.0191EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/30 1:15 a.m.30 views

CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

7.8CVSS6.7AI score
SaveExploits0References4
Prion
Prion
added 2019/12/30 1:15 a.m.18 views

Design/Logic Flaw

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

6.8CVSS7.6AI score0.0191EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2019/12/30 1:15 a.m.29 views

CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

7.8CVSS7.1AI score0.0191EPSS
SaveExploits0References4
OSV
OSV
added 2019/12/30 1:15 a.m.2 views

UBUNTU-CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

7.8CVSS7.2AI score0.0191EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2019/12/30 12:4 a.m.31 views

CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

7.6AI score0.0191EPSS
SaveExploits0References4
CVE
CVE
added 2019/12/30 12:4 a.m.167 views

CVE-2019-20079

CVE-2019-20079 affects Vim; the autocmd feature in window.c can access freed memory in Vim before version 8.1.2136. The issue’s root cause is a use-after-free in the autocmd path. Remediation is to upgrade Vim to 8.1.2136 or newer (as indicated by multiple advisories including Mageia, Debian and ...

7.8CVSS7.5AI score0.0191EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2019/12/30 12:4 a.m.53 views

CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

7.8CVSS8.7AI score0.0191EPSS
SaveExploits0
CNVD
CNVD
added 2019/12/30 12:0 a.m.6 views

Vim Reuse After Release Vulnerability

Vim is a powerful, highly customizable text editor, an improved version of vi, with many improvements and features added to Vi. A post-release reuse vulnerability exists in the autocmd feature in window.c in versions of Vim prior to 8.1.2136. No detailed vulnerability details are provided at this...

7.8CVSS6.8AI score0.0191EPSS
SaveExploits0References1
Rows per page
Query Builder