NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729

Description NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 allows attackers to cause a denial of service application crash via a crafted input. POC ./vim -u NONE -X -Z -e -s -S ./pocn.dat -c :qa! Segmentation fault pocn.dat GDB ─── Output/messages...

PT-2022-2754

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4895 Description The issue is related to a use after free vulnerability in the append command function of the Vim text editor. This vulnerability can cause software crashes, bypass protection mechanisms, modify memory...

PT-2022-2730

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4919 Description The issue is related to a heap buffer overflow in the vim strncpy find word function, which can cause software crashes, bypass protection mechanisms, modify memory, and potentially allow remote...

PT-2022-2586

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4899 Description The issue is related to a Heap-based Buffer Overflow in the cmdline erase chars function of the Vim text editor. This can lead to software crashes, memory modification, and potentially allow for remot...

PT-2022-2734

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4969 Description The issue is related to a classic buffer overflow in the Vim text editor, specifically with the implementation of the utfc ptr2len function, which involves copying a buffer without checking the size o...

PT-2022-2588

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4901 Description The issue is related to a NULL Pointer Dereference in the vim regexec string function at regexp.c:2729 in the Vim repository on GitHub. This allows attackers to cause a denial of service, resulting in...

global heap buffer overflow in skip_range in vim/vim

...

RHEL 8 : vim (RHSA-2022:1552)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1552 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: use after free in utfptr2char CVE-2022-1154 Tenable has...

Moderate: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

vim: use after free in utf_ptr2char

A heap use-after-free vulnerability was found in Vim's utfptr2char function of the src/mbyte.c file. This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering...

CVE-2022-0629 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0629 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0413 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0413 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0443 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0443 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0685 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0685 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0943 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0943 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0554 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0554 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0729 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0729 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0714 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0714 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0572 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0572 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...