Lucene search
K

12 matches found

OSV
OSV
added 2023/01/12 9:31 p.m.6 views

USN-5801-1 vim vulnerabilities

It was discovered that Vim makes illegal memory calls when pasting brackets in Ex mode. An attacker could possibly use this to crash Vim, access or modify memory, or execute arbitrary commands. This issue affected only Ubuntu 20.04 and 22.04 CVE-2022-0392 It was discovered that Vim makes illegal...

8.4CVSS7.3AI score0.01541EPSS
Exploits2References3
Ubuntu
Ubuntu
added 2023/01/12 9:31 p.m.89 views

USN-5801-1: Vim vulnerabilities

It was discovered that Vim makes illegal memory calls when pasting brackets in Ex mode. An attacker could possibly use this to crash Vim, access or modify memory, or execute arbitrary commands. This issue affected only Ubuntu 20.04 and 22.04 CVE-2022-0392 It was discovered that Vim makes illegal...

8.4CVSS7.5AI score0.01541EPSS
Exploits2
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:0 a.m.3 views

The vulnerability of the ex_retab function in the src/indent.c file of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the exretab function in the src/indent.c file of the Vim text editor is related to the issue where the operation escapes the buffer boundaries into memory when :retab 0 is used. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise i...

9.3CVSS7.4AI score0.01541EPSS
Exploits1References14Affected Software5
OSV
OSV
added 2022/03/10 12:34 p.m.2 views

CLSA-2022-1646915699 Fix CVE(s): CVE-2022-0729, CVE-2022-0572, CVE-2022-0685, CVE-2022-0554

SECURITY UPDATE: May end up with no current buffer - debian/patches/CVE-2022-0554.patch: When deleting the current buffer to not pick a quickfix buffer as the new current buffer - CVE-2022-0554 SECURITY UPDATE: Crash when repeatedly using :retab - debian/patches/CVE-2022-0572.patch: Bail out when...

8.8CVSS7.3AI score0.26583EPSS
Exploits4References1
OSV
OSV
added 2022/03/10 12:33 p.m.4 views

CLSA-2022-1646915634 Fixed CVEs in vim: CVE-2022-0729, CVE-2022-0572, CVE-2022-0554, CVE-2022-0685

CVE-2022-0554: fix ending up with no current buffer - CVE-2022-0572: fix crashing when repeatedly using :retab - CVE-2022-0685: fix crashing when using special multi-byte character - CVE-2022-0729: fix crashing with specific regexp pattern and string...

8.8CVSS7.1AI score0.26583EPSS
Exploits4References1
OSV
OSV
added 2022/03/10 12:27 p.m.4 views

CLSA-2022-1646915237 Fix of CVE: CVE-2022-0554, CVE-2022-0729, CVE-2022-0685, CVE-2022-0572

CVE-2022-0554: fix ending up with no current buffer - CVE-2022-0572: fix crashing when repeatedly using :retab - CVE-2022-0685: fix crashing when using special multi-byte character - CVE-2022-0729: fix crashing with specific regexp pattern and string...

8.8CVSS7.1AI score0.26583EPSS
Exploits4References1
CloudLinux
CloudLinux
added 2022/03/10 12:27 p.m.110 views

Fix of CVE: CVE-2022-0554, CVE-2022-0729, CVE-2022-0685, CVE-2022-0572

CVE-2022-0554: fix ending up with no current buffer - CVE-2022-0572: fix crashing when repeatedly using :retab - CVE-2022-0685: fix crashing when using special multi-byte character - CVE-2022-0729: fix crashing with specific regexp pattern and string...

8.8CVSS1.4AI score0.26583EPSS
Exploits4References1
CloudLinux
CloudLinux
added 2022/02/21 5:56 p.m.44 views

Fix of CVE: CVE-2022-0413, CVE-2022-0417, CVE-2022-0408, CVE-2022-0443

CVE-2022-0408: fix stack corruption when looking for spell suggestions - CVE-2022-0413: fix using freed memory when substitute with function call - CVE-2022-0417: fix illegal memory access caused by ':retab 0' - CVE-2022-0443: fix using freed memory with ':lopen' and ':bwipe'...

8.4CVSS1.5AI score0.01541EPSS
Exploits4References1
OSV
OSV
added 2022/02/21 5:56 p.m.5 views

CLSA-2022-1645466182 Fix of CVE: CVE-2022-0413, CVE-2022-0417, CVE-2022-0408, CVE-2022-0443

CVE-2022-0408: fix stack corruption when looking for spell suggestions - CVE-2022-0413: fix using freed memory when substitute with function call - CVE-2022-0417: fix illegal memory access caused by ':retab 0' - CVE-2022-0443: fix using freed memory with ':lopen' and ':bwipe'...

8.4CVSS7.1AI score0.01541EPSS
Exploits4References1
Mageia
Mageia
added 2021/09/23 4:49 a.m.31 views

Updated vim packages fix security vulnerability

Using retab with large value may lead to heap buffer overflow...

8.6CVSS2AI score0.00712EPSS
Exploits1References3
CNVD
CNVD
added 2021/09/07 12:0 a.m.31 views

Vim Buffer Overflow Vulnerability (CNVD-2022-05074)

Vim is a UNIX-based editor. vim has a buffer overflow vulnerability, which stems from the use of retab in the vim software when the value of memory access is larger invalid, an attacker can use this vulnerability to cause a heap buffer overflow...

8.6CVSS3AI score0.00712EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/06 12:0 a.m.1 views

Vim 缓冲区错误漏洞

Vim is a UNIX-based editor. vim has a buffer overflow vulnerability, which stems from the use of retab in the vim software when the value of memory access is larger invalid, an attacker can use this vulnerability to cause a heap buffer overflow...

8.6CVSS6.2AI score0.00712EPSS
Exploits1References13
Rows per page
Query Builder