CLSA-2022-1643640747 Fixed CVEs in vim: CVE-2022-0213, CVE-2022-0261

CVE-2022-0213: fix going over the end of status line buffer - CVE-2022-0261: fix block insert goes over the end of the line...

OESA-2022-1500 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Cross site scripting

Out-of-bounds Read in vim/vim prior to 8.2...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to a heap-based Buffer Overflow allowing an attacker to crash the system...

CVE-2022-0213

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0128

vim is vulnerable to Out-of-bounds Read...

Design/Logic Flaw

vim is vulnerable to Use After Free...

CVE-2021-4166

vim is vulnerable to Out-of-bounds Read...

CVE-2021-4136

vim is vulnerable to Heap-based Buffer Overflow...

OESA-2021-1463 vim security update

Vim is a highly configurable text editor for efficiently creating and changing any kind of text. Security Fixes: vim is vulnerable to Heap-based Buffer Overflow.CVE-2021-4019 vim is vulnerable to Use After Free.CVE-2021-4069...

Updated vim packages fix security vulnerability

heap-based buffer overflow in findhelptags in src/help.c...

OESA-2021-1450 vim security update

Vim is a highly configurable text editor for efficiently creating and changing any kind of text. Security Fixes: vim is vulnerable to Use After Free.CVE-2021-3974 vim is vulnerable to Heap-based Buffer Overflow.CVE-2021-3973...

CVE-2021-3928

vim is vulnerable to Use of Uninitialized Variable...

CVE-2021-3872

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

MGASA-2020-0082 Updated vim and neovim packages fix security vulnerability

Updated vim and neovim package fixes security vulnerability: It was discovered that Vim before 8.1.1365 and Neovim before 0.3.6 did not restrict the :source! command when executed in a sandbox. This allows remote attackers to take advantage of the modeline feature to inject arbitrary commands whe...

Important: vim

Issue Overview: It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution. CVE-2019-12735 Affected Packages: vim Note: This advisory is applicable to...

DSA-4467-1 vim - security update

Bulletin has no description...

Security update for vim (important)

openSUSE Security Update: Security update for vim Announcement ID: openSUSE-SU-2019:1561-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This...