9148 matches found
Denial Of Service (DoS)
vim is vulnerable to denial of service. An attacker can crash the application through the heap-based buffer overflow in the cmdlineerasechars function of the library...
Heap-Based Buffer Overflow
vim is vulnerable to heap buffer overflow. The vulnerability exists in vimstrncpy findword which allows an attacker to bypass protection mechanism and crash the system...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to a NULL Pointer Dereference in function vimregexecstring at regexp.c allowing an attacker to crash the system via a maliciously crafted input...
CLSA-2022-1653006752 Fixed CVEs in vim: CVE-2022-1620, CVE-2022-1616, CVE-2022-1629, CVE-2022-1621, CVE-2022-1619
CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...
Fixed CVEs in vim: CVE-2022-1620, CVE-2022-1616, CVE-2022-1629, CVE-2022-1621, CVE-2022-1619
CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...
The vulnerability of the cmdline_erase_chars() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the cmdlineerasechars function in the Vim text editor is related to the issue of writing operations beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created...
Fedora: Security Advisory for vim (FEDORA-2022-d20b51de9c)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability in the implementation of the vim_regexec_string() function in the Vim text editor allows a hacker to trigger a service failure.
The vulnerability of the vimregexecstring function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
ALPINE-CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
DEBIAN-CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
AZL-9791 CVE-2022-1796 affecting package vim for versions less than 8.2.5064-1
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
UBUNTU-CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
CVE-2022-1785
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977...
DEBIAN-CVE-2022-1785
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977...