ROS-20220525-01

A vulnerability in the Vim text editor is related to a boundary error when processing unreliable input data. Exploitation of the vulnerability could allow an attacker acting remotely to trick the victim into to open a specially crafted file and initiate unauthorized writing and execution of...

CVE-2022-1851

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1851

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1851: Out-of-bounds Read

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1851

CVE-2022-1851 corresponds to a Vim out-of-bounds read vulnerability affecting vim/vim before 8.2. The Astra Linux security bulletin explicitly lists this as Out-of-bounds Read in vim/vim prior to 8.2, and other advisories (Amazon ALAS2023-2023-098, Cloud Foundry USN) reference the CVE within Vim ...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in Vim prior to version 8.2, which stems from an out-of-bounds read issue in Vim...

CVE-2022-1851

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1769)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim

...

Fedora: Security Advisory for vim (FEDORA-2022-d044e7e0b4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5433-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5433-1 advisory. It was discovered that Vim incorrectly handled parsing of filenames in its search functionality. If a user were tricked into opening a specially crafted...

CLSA-2022-1653328424 Fixed CVEs in vim: CVE-2022-1616, CVE-2022-1621, CVE-2022-1620, CVE-2022-1629, CVE-2022-1619

CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...

USN-5433-1: Vim vulnerabilities

It was discovered that Vim incorrectly handled parsing of filenames in its search functionality. If a user were tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. CVE-2021-3973 It was discovered that Vim incorrectly handled memo...

Out-of-bounds read in function gchar_cursor

Description Out-of-bounds read in function gcharcursor at misc1.c:532 vim version git log commit 68e64d2c1735f2a39afa8a0475ae29bedb116684 HEAD - master, tag: v8.2.5006, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch11s.dat -c :qa!...

Heap-based Buffer Overflow in function utf_head_off

Description Heap-based Buffer Overflow in function utfheadoff at mbyte.c:3872 vim Version git log commit 68e64d2c1735f2a39afa8a0475ae29bedb116684 HEAD - master, tag: v8.2.5006, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S poch6s.dat -c :qa!...

[SECURITY] Fedora 34 Update: vim-8.2.4975-1.fc34

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

PT-2022-4857

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to an out-of-bounds read in the Vim text editor, specifically in the gchar cursor function of the misc1.c component. This allows a remote attacker to access confidential data, compromi...

Buffer Over-read in function utf_ptr2char

Description Buffer Over-read in function utfptr2char at mbyte.c:1794 vim version git log commit 31d9948e3a2529c2f619d56bdb48291dc261233d HEAD - master, tag: v8.2.5026, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch10ns.dat -c :qa!...

PT-2022-4639

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a buffer over-read in the Vim text editor. It is associated with the use of memory after it has been freed, which can be exploited to impact the confidentiality, integrity, and...

Fedora: Security Advisory for vim (FEDORA-2022-74b9e404c1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...