CVE-2022-2042

A heap use-after-free vulnerability was found in Vim's skipwhite function of the src/charset.c file. This flaw occurs because of an uninitialized attribute value and freed memory in the spell command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a...

SUSE-SU-2022:2102-1 Security update for vim

This update for vim fixes the following issues: - CVE-2017-17087: Fixed information leak via .swp files bsc1070955. - CVE-2021-3875: Fixed heap-based buffer overflow bsc1191770. - CVE-2021-3903: Fixed heap-based buffer overflow bsc1192167. - CVE-2021-3968: Fixed heap-based buffer overflow...

OESA-2022-1707 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Heap-based Buffer Overflow in function get_lisp_indent

Description Heap-based Buffer Overflow in function getlispindent at indent.c:1994 vim version git log commit 83497f875881973df772cc4cc593766345df6c4a HEAD - master, tag: v8.2.5105, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/pochbo2s.dat -...

Out-of-bounds Read in function suggest_trie_walk

Description Out-of-bounds Read in function suggesttriewalk at spellsuggest.c:1437 vim version git log commit 83497f875881973df772cc4cc593766345df6c4a HEAD - master, tag: v8.2.5105, origin/master, origin/HEAD POC root@fuzz-vm0-187:/home/fuzz/fuzz/vim/afl/src ./vim -u NONE -i NONE -n -m -X -Z -e -s...

Out-of-bounds write in function vim_regsub_both

Description Out-of-bounds write in function vimregsubboth at regexp.c:1973 vim version git log commit 83497f875881973df772cc4cc593766345df6c4a HEAD - master, tag: v8.2.5105, origin/master, origin/HEAD POC root@fuzz-vm0-187:/home/fuzz/fuzz/vim/afl/src ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1856)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1880)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fixed CVEs in vim: CVE-2022-1927, CVE-2022-1897

CVE-2022-1897: fix substitution which overwrites an allocated buffer - CVE-2022-1927: fix invalid cursor position after '0;' range...

CLSA-2022-1655320860 Fixed CVEs in vim: CVE-2022-1927, CVE-2022-1897

CVE-2022-1897: fix substitution which overwrites an allocated buffer - CVE-2022-1927: fix invalid cursor position after '0;' range...

CLSA-2022-1655317609 Fixed CVEs in vim: CVE-2022-1897, CVE-2022-1927

CVE-2022-1897: fix substitution which overwrites an allocated buffer - CVE-2022-1927: fix invalid cursor position after '0;' range...

CVE-2022-1674 affecting package vim 8.2.4774-1

CVE-2022-1674 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1851 affecting package vim 8.2.4774-1

CVE-2022-1851 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1796 affecting package vim 8.2.4774-1

CVE-2022-1796 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1735 affecting package vim 8.2.4774-1

CVE-2022-1735 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1769 affecting package vim 8.2.4774-1

CVE-2022-1769 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1621 affecting package vim 8.2.4774-1

CVE-2022-1621 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1619 affecting package vim 8.2.4774-1

CVE-2022-1619 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1898 affecting package vim 8.2.4774-1

CVE-2022-1898 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1629 affecting package vim 8.2.4774-1

CVE-2022-1629 affecting package vim 8.2.4774-1. An upgraded version of the package is available that resolves this issue...