Lucene search
K

39 matches found

RedHat Linux
RedHat Linux
added 2022/04/26 9:55 p.m.3 views

vim: use after free in utf_ptr2char

A heap use-after-free vulnerability was found in Vim's utfptr2char function of the src/mbyte.c file. This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering...

7.8CVSS7.3AI score0.01144EPSS
Exploits1References4
AlmaLinux
AlmaLinux
added 2022/04/26 1:49 p.m.112 views

Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: use after free in utfptr2char CVE-2022-1154...

7.8CVSS3.5AI score0.01144EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:0 a.m.2 views

The vulnerability of the utf_ptr2char() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the utfptr2char function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created file...

10CVSS7.8AI score0.01144EPSS
Exploits1References19Affected Software11
Veracode
Veracode
added 2022/04/07 8:0 p.m.23 views

Use After Free

vim is vulnerable to use after free. The vulnerability exists due to a memory corruption in utfptr2char in GitHub repository vim/vim...

7.8CVSS1.9AI score0.01144EPSS
Exploits1References12Affected Software1
RedhatCVE
RedhatCVE
added 2022/04/07 2:19 p.m.67 views

CVE-2022-1154

A heap use-after-free vulnerability was found in Vim's utfptr2char function of the src/mbyte.c file. This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering...

7.8CVSS7.8AI score0.01144EPSS
Exploits1References3
Microsoft CVE
Microsoft CVE
added 2022/04/05 7:0 a.m.1 views

Use after free in utf_ptr2char in vim/vim

...

7.8CVSS7.5AI score0.01144EPSS
Exploits1
Slackware Linux
Slackware Linux
added 2022/03/30 10:41 p.m.38 views

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-8.2.4649-i586-1slack15.0.txz: Upgraded. Fixes a use-after-free in utfptr2char in vim/vim prior to 8.2.4646. This vulnerability is...

7.8CVSS8.1AI score0.01144EPSS
Exploits1
NVD
NVD
added 2022/03/30 12:15 p.m.19 views

CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS0.01144EPSS
Exploits1References9
OSV
OSV
added 2022/03/30 12:15 p.m.0 views

AZL-9189 CVE-2022-1154 affecting package vim for versions less than 8.2.4743-1

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS7.2AI score0.01144EPSS
Exploits1References1
OSV
OSV
added 2022/03/30 12:15 p.m.1 views

DEBIAN-CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS7.6AI score0.01144EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/30 12:15 p.m.2 views

CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS7.2AI score0.01144EPSS
Exploits1References12
UbuntuCve
UbuntuCve
added 2022/03/30 12:15 p.m.38 views

CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS7.1AI score0.01144EPSS
Exploits1References6
Cvelist
Cvelist
added 2022/03/30 12:0 a.m.21 views

CVE-2022-1154 Use after free in utf_ptr2char in vim/vim

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS8.4AI score0.01144EPSS
Exploits1References9
CVE
CVE
added 2022/03/30 12:0 a.m.383 views

CVE-2022-1154

CVE-2022-1154 affects Vim (vim/vim) and is caused by a use-after-free in utf_ptr2char prior to 8.2.4646. The issue can crash Vim and, per advisories, may allow code execution. Remediation/vendoring details are not in the Initial Description; connected advisories note fixes/upgrades but do not spe...

7.8CVSS8.3AI score0.01144EPSS
Exploits1References9Affected Software1
Debian CVE
Debian CVE
added 2022/03/30 12:0 a.m.65 views

CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS8.7AI score0.01144EPSS
Exploits1
CNNVD
CNNVD
added 2022/03/30 12:0 a.m.1 views

vim 资源管理错误漏洞

vim is an editor for UNIX-based platforms. A resource management error vulnerability exists in versions of vim prior to 8.2.4646, which stems from a post-release reuse vulnerability in the utfptr2char function...

7.8CVSS7.4AI score0.01144EPSS
Exploits1References45
OSV
OSV
added 2022/03/30 12:0 a.m.31 views

CVE-2022-1154 Use after free in utf_ptr2char in vim/vim

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS8.3AI score0.01144EPSS
Exploits1References11
AlpineLinux
AlpineLinux
added 2022/03/30 12:0 a.m.115 views

CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

7.8CVSS8.5AI score0.01144EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.2 views

The vulnerability of the utf_ptr2char() function in the VIM text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the utfptr2char function in the VIM text editor is related to the execution of a write operation beyond the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created file...

7.8CVSS7.9AI score0.00385EPSS
Exploits1References12Affected Software6
Rows per page
Query Builder