CLSA-2022-1653328424 Fixed CVEs in vim: CVE-2022-1616, CVE-2022-1621, CVE-2022-1620, CVE-2022-1629, CVE-2022-1619

CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...

Use after free in append_command in vim/vim

...

Heap buffer overflow in vim_strncpy find_word in vim/vim

...

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim

...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 8.2 that stems from the presence of a heap-based buffer overflow...

[SECURITY] Fedora 35 Update: vim-8.2.4927-1.fc35

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

[SECURITY] Fedora 36 Update: vim-8.2.4927-1.fc36

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

ALPINE-CVE-2022-1621

Heap buffer overflow in vimstrncpy findword in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

ALPINE-CVE-2022-1620

NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 allows attackers to cause a denial of service application crash via a crafted input...

DEBIAN-CVE-2022-1616

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

The vulnerability of the Vim text editor, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

[SECURITY] Fedora 35 Update: vim-8.2.4701-1.fc35

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

heap buffer overflow in get_one_sourceline in vim/vim

...

Vim 缓冲区错误漏洞

Vim is an editor based on the UNIX platform. there is a security vulnerability in Vim and no details of the vulnerability are currently available...

NULL Pointer Dereference in vim/vim

...

Use of Out-of-range Pointer Offset in vim/vim

...

The vulnerability of the src/ex_cmds.c component of the text editor Vim, allowing a hacker to execute arbitrary code.

The vulnerability of the src/excmds.c component of the text editor Vim relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the NameBuff function in the Vim text editor allows a hacker to trigger buffer overflow.

The vulnerability of the NameBuff function in the Vim text editor arises due to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow...

The vulnerability of the ex_cmds.c component of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the excmds.c component of the Vim text editor arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vulnerability of the init_ccline() function (ex_getln.c) in the Vim text editor, allowing a hacker to trigger buffer overflow attacks

The vulnerability of the initccline function exgetln.c in the Vim text editor is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow...