Fedora: Security Advisory for vim (FEDORA-2022-b718ebbfce)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1363)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-2160

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2.4646 Description The issue is related to a use after free in the utf ptr2char function. This can be exploited by a remote attacker using a specially crafted file, potentially allowing the execution of arbitrary code...

heap buffer overflow in get_one_sourceline

Description When fuzzing vim commit 471b3aed3 I discovered a heap buffer overflow. I'm using ubuntu 20.04 with clang 13 Proof of Concept Here is the minimized poc bash norm300gr0 so How to build bash LD=lld AS=llvm-as AR=llvm-ar RANLIB=llvm-ranlib CC=clang CXX=clang++ CFLAGS="-fsanitize=address"...

Use after free in utf_ptr2char

✍️ Description When fuzzing vim commit 9dac9b175, I discovered a use after free. I'm testing on ubuntu 20.04 with clang 13. Proof of Concept Here is the minimized poc bash s/\v/\r /%',600 How to build bash LD=lld AS=llvm-as AR=llvm-ar RANLIB=llvm-ranlib CC=clang CXX=clang++...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1363)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 Note that Tenable Network...

PT-2022-3214

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4647 Description The issue is related to a heap buffer overflow in the get one sourceline function of the Vim text editor. This can be exploited by opening a specially crafted file, potentially allowing an attacker to...

Buffer Overflow

vim is vulnerable to buffer overflow. The vulnerability exists due to a lack of validation of the pointer accessing the Heap which allows an attacker to cause an application crash...

The vulnerability of the Vim text editor arises from buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Vim text editor arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Moderate Photon OS Security Update - PHSA-2022-0454

Updates of 'openssl', 'atftp', 'vim' packages of Photon OS have been released...

Heap-based Buffer Overflow occurs in vim in vim/vim

...

Important Photon OS Security Update - PHSA-2022-3.0-0374

Updates of 'libtiff', 'bluez', 'vim', 'haproxy', 'consul', 'kubernetes' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-0374

Updates of 'libtiff', 'consul', 'bluez', 'vim', 'kubernetes', 'haproxy' packages of Photon OS have been released...

EulerOS 2.0 SP5 : vim (EulerOS-SA-2022-1339)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Use After Free CVE-2021-4192 - vim is vulnerable to Out-of-bounds Read CVE-2021-4193 Note that Tenable Network Security has...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1339)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2022-1580 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

vim security update

8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16.12 - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository 2:8.0.1763-16.11 - CVE-2022-0413 vim: use after free in src/excmds.c - Fix specfile problems - Resolves: rhbz2048525 2:8.0.1763-16.10 - CVE-2022-04...

Vim has an unspecified vulnerability (CNVD-2022-20153)

Vim is an editor based on the UNIX platform. there is a security vulnerability in Vim and no details of the vulnerability are currently available...

Oracle Linux 8 : vim (ELSA-2022-0894)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0894 advisory. - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository - CVE-2022-0413 vim: use after free in src/excmds.c - CVE-2022-0413 vim: use after...

Debian DLA-2947-1 : vim - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2947 advisory. Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows, out-of-bounds reads and Null pointer dereferences may lead ...