46 matches found
EulerOS 2.0 SP3 : vim (EulerOS-SA-2022-1769)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3984, CVE-2021-4019, CVE-2022-0213 - vim is vulnerable to Use After Free CVE-2021-4069,...
Buffer Over-read in function utf_ptr2char
Description Buffer Over-read in function utfptr2char at mbyte.c:1794 vim version git log commit 31d9948e3a2529c2f619d56bdb48291dc261233d HEAD - master, tag: v8.2.5026, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch10ns.dat -c :qa!...
Debian DLA-3011-1 : vim - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3011 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0261, CVE-2022-0572 - Access of Memory Location Before Start of Buffer in GitHub...
Oracle Linux 8 : vim (ELSA-2022-1552)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1552 advisory. 8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16.13 - CVE-2022-1154 vim: use after free in utfptr2char Tenable has extracted the...
vim security update
8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16.13 - CVE-2022-1154 vim: use after free in utfptr2char...
vim: use after free in utf_ptr2char
A heap use-after-free vulnerability was found in Vim's utfptr2char function of the src/mbyte.c file. This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering...
Moderate: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: use after free in utfptr2char CVE-2022-1154...
The vulnerability of the utf_ptr2char() function in the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the utfptr2char function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created file...
Use After Free
vim is vulnerable to use after free. The vulnerability exists due to a memory corruption in utfptr2char in GitHub repository vim/vim...
CVE-2022-1154
A heap use-after-free vulnerability was found in Vim's utfptr2char function of the src/mbyte.c file. This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering...
Use after free in utf_ptr2char in vim/vim
...
[slackware-security] vim
New vim packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-8.2.4649-i586-1slack15.0.txz: Upgraded. Fixes a use-after-free in utfptr2char in vim/vim prior to 8.2.4646. This vulnerability is...
AZL-9189 CVE-2022-1154 affecting package vim for versions less than 8.2.4743-1
Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...
CVE-2022-1154
Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...
DEBIAN-CVE-2022-1154
Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...
CVE-2022-1154
Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...
CVE-2022-1154
Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...
CVE-2022-1154 Use after free in utf_ptr2char in vim/vim
Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...
