Vim 代码问题漏洞

Vim is a cross-platform text editor. versions of Vim prior to 8.2.5163 have a security vulnerability that stems from a null pointer dereference in the diffcheck function, which can be exploited by an attacker to crash, exit, or restart the service...

CVE-2022-2208

CVE-2022-2208 affects vim/vim prior to 8.2.5163. A NULL pointer dereference in vim can cause the vim process to crash (denial of service) when handling crafted input. Remediation: upgrade Vim to 8.2.5163 or newer (platform packages listed in advisories, e.g., ALAS2022-1628, ALAS2023-098).

CVE-2022-2210 Out-of-bounds Write in vim/vim

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

Vim 安全漏洞

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 8.2, which stems from a boundary error in the function insbs when handling untrusted input. A remote attacker could exploit this vulnerability to cause sensitive information corruption, crashes, ...

CVE-2022-2207

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-2210

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

CVE-2022-2210 Out-of-bounds Write in vim/vim

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

CVE-2022-2208 NULL Pointer Dereference in vim/vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

AZL-9988 CVE-2022-2206 affecting package vim for versions less than 8.2.5172-1

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Null pointer dereference in function skipwhite

Description Null pointer dereference in function skipwhite at charset.c:1428 Version commit c101abff4c6756db4f5e740fde289decb9452efa HEAD - master, tag: v8.2.5164 Proof of Concept guest@elk:/trung$ valgrind ./vimlatest/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./poc/poc40min -c :qa! ==32519==...

Information Disclosure

vim is vulnerable to information disclosure. Buffer over-read in the currentquote function allows local attackers to cause information disclosure...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the usage of invalid index when looking for spell suggestions which causes out-of-bound reads which then lead to an application crash...

Information Disclosure

vim is vulnerable to information disclosure. A buffer over-read in function grabfilename is capable of crashing the software, memory modification, and possible remote execution...

Use-After-Free

vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...