8933 matches found
CVE-2021-3974 Use After Free in vim/vim
vim is vulnerable to Use After Free...
CVE-2021-3974
vim is vulnerable to Use After Free...
CVE-2021-3974
CVE-2021-3974 is a Use-After-Free vulnerability in Vim. Connected advisories indicate Vim versions prior to 8.2.4081-1 are affected; upgrading to 8.2.4081-1 or newer resolves the issue (per Mariner, ALAS2-2022-1743, ALAS2022-1557, and Cloud Foundry USN-5247-1). Exploitation details are not provid...
Heap-based Buffer Overflow in vim/vim
Description Greetings, A Heap-based Buffer Overflow issue was discovered in Vim. The POC file is reduced to the absolute minimum to reproduce the problem. Please see sanitizer output and the "trimmed" POC file link below. System info OS version : Ubuntu 20.04.2 LTS + Clang 12 with ASan Vim Versio...
[SECURITY] Fedora 33 Update: vim-8.2.3582-1.fc33
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
PT-2021-7300 · Vim +10 · Vim +10
Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Heap-based Buffer Overflow in the vim text editor, which can allow an attacker to impact the confidentiality, integrity, and availability of protected information...
Fedora: Security Advisory for vim (FEDORA-2021-cfadac570a)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Oracle Linux 8 : vim (ELSA-2021-4517)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4517 advisory. - 2004974 - CVE-2021-3796 vim: use-after-free in nvreplace in normal.c rhel-8.5.0 Tenable has extracted the preceding description block directly from t...
Ubuntu: Security Advisory (USN-5147-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
vim security update
8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16 - 2004974 - CVE-2021-3796 vim: use-after-free in nvreplace in normal.c rhel-8.5.0 - 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utfptr2char in mbyte.c rhel-8.5.0...
USN-5147-1: Vim vulnerabilities
It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 14.04 ESM. CVE-2017-17087 It was discovered that Vim incorrectly handled restricted mode. A local attacker...
USN-5147-1 vim vulnerabilities
It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 14.04 ESM. CVE-2017-17087 It was discovered that Vim incorrectly handled restricted mode. A local attacker...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Vim vulnerabilities (USN-5147-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5147-1 advisory. It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to...
Fedora: Security Advisory for vim (FEDORA-2021-58ab85548d)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for vim (FEDORA-2021-a5e55a9e02)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2021-7388 · Vim +6 · Vim +6
Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Heap-based Buffer Overflow in the vim text editor. It is associated with incorrect handling of CTRL-W f when no file name is present. Exploitation of this issue allows...
Heap-based Buffer Overflow in vim/vim
Description Greetings, A Heap-based Buffer Overflow issue was discovered in Vim. The POC file is reduced to the absolute minimum to reproduce the problem. Please see sanitizer output and the "trimmed" POC file link below. System info OS version : Ubuntu 20.04.2 LTS + Clang 12 with ASan Vim Versio...
The vulnerability of the nv_replace() function in the VIM text editor allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the nvreplace function in the VIM text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure using a specially created file...
RHEL 8 : vim (RHSA-2021:4517)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4517 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap-based buffer overflow in utfptr2char in mbyte...
CLSA-2021-1636568737 Fixed CVEs in vim: CVE-2021-3872, CVE-2021-3903, CVE-2021-3875
CVE-2021-3872: fix illegal memory access if buffer name is very long - CVE-2021-3875: fix mlget error after search with range - CVE-2021-3903: fix invalid memory access when scrolling without a valid screen...