204 matches found
PT-2018-13243 · Xkbcommon +5 · Xkbcommon +6
Name of the Vulnerable Software and Affected Versions: xkbcommon versions prior to 0.8.1 libxkbcommon versions prior to 0.8.1 Description: A local attacker could crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation, due to an endless recursion in xkbcomp/expr.c...
PT-2018-13247 · Xkbcommon +5 · Xkbcommon +5
Name of the Vulnerable Software and Affected Versions: xkbcommon versions prior to 0.8.1 Description: The issue is related to an invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c. This could be exploited by local attackers to crash xkbcommon keymap parsers or possibly have other...
PT-2018-13251 · Xkbcommon +5 · Xkbcommon +5
Name of the Vulnerable Software and Affected Versions: xkbcommon versions prior to 0.8.2 Description: The issue is related to unchecked NULL pointer usage in the LookupModMask function in xkbcomp/expr.c. This could be exploited by local attackers to crash the xkbcommon parser by supplying a craft...
Vim modelines Remote Command Execution (CVE-2016-1248)
A remote code execution vulnerability exists in the modeline component of Vim due to insufficient input validation when parsing the filetype, syntax, and keymap options in modelines. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to open a file containing a...
USN-3139-1 vim vulnerability
Florian Larysch discovered that the Vim text editor did not properly validate values for the 'filetype', 'syntax', and 'keymap' options. An attacker could trick a user into opening a file with specially crafted modelines and possibly execute arbitrary code with the user's privileges...
Ubuntu 14.04 LTS / 16.04 LTS : Vim vulnerability (USN-3139-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3139-1 advisory. Florian Larysch discovered that the Vim text editor did not properly validate values for the 'filetype', 'syntax', and 'keymap' options. An attacker...
Ubuntu: Security Advisory (USN-3139-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vim Input Validation Vulnerability
Vim is an open-source, configurable text editor for creating and changing any type of text, which can be used on most UNIX systems and Apple OS X. It can be used to create and change any type of text. A security vulnerability in versions prior to Vim patch 8.0.0056 stems from the program's failur...
DEBIAN-CVE-2016-1248
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...
ALPINE-CVE-2016-1248
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...
CVE-2016-1248
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...
UBUNTU-CVE-2016-1248
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...
DSA-3722-1 vim - security update
Bulletin has no description...
DLA-718-1 vim - security update
Bulletin has no description...
PT-2016-4670 · Vim +5 · Vim +5
Name of the Vulnerable Software and Affected Versions: vim versions prior to 8.0.0056 Description: The issue arises from improper validation of values for the filetype, syntax, and keymap options. This can lead to the execution of arbitrary code when a file with a specially crafted modeline is...
Linux Kernel <= 2.6 Console Keymap Local Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15122/info The Linux kernel is susceptible to a local command-injection vulnerability via console keymap modifications. This issue occurs because unprivileged users can alter the system-wide console keymap. Local users ma...
SuSE 11 Security Update : Xen (SAT Patch Number 2230)
Collective Xen/201004 Update, containing fixes for the following issues : - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under SLES11 xen...
SuSE 11 Security Update : Xen (SAT Patch Number 2230)
Collective Xen/201004 Update, containing fixes for the following issues : - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under SLES11 xen...
openSUSE Security Update : xen-201004 (openSUSE-SU-2010:0293-1)
Collective Xen 2010/04 Update, containing fixes for the following issues : bnc576832 - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under...
Mandriva Update for kbd MDVA-2008:174 (kbd)
Check for the Version of kbd OpenVAS Vulnerability Test Mandriva Update for kbd MDVA-2008:174 kbd Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...