Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_0894)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20220894 advisory. vim: Heap-based buffer overflow in blockinsert in src/ops.c CVE-2022-0261 vim: Heap-based buffer overflow in utfheadoff in mbyte.c CVE-2022-0318 vim:...

vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c

A flaw was found in vim. The vulnerability occurs due to illegal memory access with bracketed paste in Ex mode and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution...

Vulnerability of the getexmodeline() function (ex_getln.c) in the Vim text editor, allowing an attacker to trigger a buffer overflow

The vulnerability of the getexmodeline function exgetln.c in the Vim text editor is related to writing beyond the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a buffer overflow...

PT-2022-1730

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the vim text editor, specifically in the getexmodeline function. This overflow can be exploited to cause a buffer overflow, potentially allowing an...