MiracleLinux 8 : vim-8.0.1763-16.el8.4 (AXSA:2022-3035:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3035:01 advisory. vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when...

The vulnerability of the getvcol function in the src/charset.c component of the Vim text editor allows a hacker to gain access to confidential data.

The vulnerability of the getvcol function in the src/charset.c file of the Vim text editor is related to the escape character being interpreted beyond its intended scope when using /%V. Exploiting this vulnerability allows an attacker to gain access to confidential data...

vim: out-of-bound read in getvcol()

It was found that vim was vulnerable to an out-of-bound read flaw in getvcol. A specially crafted file could be used to, when opened in vim, disclose some of the process's internal memory...

CLSA-2022-1642087622 Fix CVE(s): CVE-2021-4192, CVE-2021-4193

SECURITY UPDATE: Using freed memory with /%V - debian/patches/CVE-2021-4192.patch: Get the line again after getvvcol - CVE-2021-4192 SECURITY UPDATE: Going beyond the end of the line with /%V - debian/patches/CVE-2021-4193.patch: Check for valid column in getvcol - CVE-2021-4193...

CVE-2021-4193

It was found that vim was vulnerable to an out-of-bound read flaw in getvcol. A specially crafted file could be used to, when opened in vim, disclose some of the process's internal memory...

PT-2021-7395 · Vim +11 · Vim +11

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to an out-of-bounds read in the vim text editor. It is associated with the getvcol function in the src/charset.c component and can be triggered when using /%V. This allows ...