CVE-2022-2210 Out-of-bounds Write in vim/vim

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

CVE-2022-2208 NULL Pointer Dereference in vim/vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163...

AZL-9988 CVE-2022-2206 affecting package vim for versions less than 8.2.5172-1

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Null pointer dereference in function skipwhite

Description Null pointer dereference in function skipwhite at charset.c:1428 Version commit c101abff4c6756db4f5e740fde289decb9452efa HEAD - master, tag: v8.2.5164 Proof of Concept guest@elk:/trung$ valgrind ./vimlatest/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./poc/poc40min -c :qa! ==32519==...

Information Disclosure

vim is vulnerable to information disclosure. Buffer over-read in the currentquote function allows local attackers to cause information disclosure...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the usage of invalid index when looking for spell suggestions which causes out-of-bound reads which then lead to an application crash...

Information Disclosure

vim is vulnerable to information disclosure. A buffer over-read in function grabfilename is capable of crashing the software, memory modification, and possible remote execution...

Use-After-Free

vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...

CVE-2022-1898 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1898 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1771 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1771 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1796 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1796 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1886 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1886 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1785 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1785 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...