USN-5995-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to cras...

Ubuntu: Security Advisory (USN-5995-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2022-2946

Use After Free in GitHub repository vim/vim prior to 9.0.0246...

EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2023-1208)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. CVE-2022-2571 - Out-of-bounds Write to API in GitHub...

Updated vim packages fix security vulnerability

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. CVE-2022-2000, CVE-2022-2129, CVE-2022-2210 Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-2042 Buffer Over-read in GitHub repository vim/vim prior to 8.2. CVE-2022-2124, CVE-2022-2175 Heap-based Buffer Overflow in...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2783)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2703)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2703)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2257 - Use After Free in GitHub repository vim/vim prior to 9.0. CVE-2022-22...

Amazon Linux 2 : vim (ALAS-2022-1868)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1868 advisory. A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened i...

CVE-2022-2946 affecting package vim 9.0.0181-1

CVE-2022-2946 affecting package vim 9.0.0181-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2946 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2946 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

Slackware: Security Advisory (SSA:2022-237-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2022-237-01)

The version of vim installed on the remote host is prior to 9.0.0270. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-237-01 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. CVE-2022-2923 - Use After Free in GitHub repositor...

UBUNTU-CVE-2022-2946

Use After Free in GitHub repository vim/vim prior to 9.0.0246...

CVE-2022-2946

CVE-2022-2946 is a documented Use-After-Free vulnerability in vim/vim prior to 9.0.0246. The connected documents confirm Vim-related memory-safety issues across multiple advisories, but do not specify an exact fixed version for this CVE beyond general guidance to update Vim. The risk and impact a...