SUSE-SU-2022:3229-1 Security update for vim

This update for vim fixes the following issues: Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through getlispindent bsc1200902. - CVE-2022-2182: Fixed heap-based buffer overflow through parsecmdaddress bsc1200903. - CVE-2022-2175: Fixed buffer over-read...

CLSA-2022-1658854080 Fixed CVEs in vim: CVE-2022-2289, CVE-2022-2304

CVE-2022-2289: bail out when diff pointer is no longer valid to avoid accessing freed memory with diff put - CVE-2022-2304: limit the word length to avoid out of bound accesing...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5516-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5516-1 advisory. It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the corruption of sensitive...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5507-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5507-1 advisory. It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the program to crash, use unexpected...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5498-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5498-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file...

SUSE-SU-2022:2102-1 Security update for vim

This update for vim fixes the following issues: - CVE-2017-17087: Fixed information leak via .swp files bsc1070955. - CVE-2021-3875: Fixed heap-based buffer overflow bsc1191770. - CVE-2021-3903: Fixed heap-based buffer overflow bsc1192167. - CVE-2021-3968: Fixed heap-based buffer overflow...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5460-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5460-1 advisory. It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose...

CLSA-2022-1653932706 Fixed CVEs in vim: CVE-2022-1733, CVE-2022-1735

CVE-2022-1733: fix reading past end of the line when C-indenting - CVE-2022-1735: fix invalid memory access caused by changing text in Visual mode...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5433-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5433-1 advisory. It was discovered that Vim incorrectly handled parsing of filenames in its search functionality. If a user were tricked into opening a specially crafted...

SUSE-SU-2022:0736-2 Security update for vim

This update for vim fixes the following issues: - CVE-2022-0318: Fixed heap-based buffer overflow bsc1195004. - CVE-2021-3796: Fixed use-after-free in nvreplace in normal.c bsc1190570. - CVE-2021-3872: Fixed heap-based buffer overflow in winredrstatus drawscreen.c bsc1191893. - CVE-2021-3927: Fix...

OPENSUSE-SU-2022:0736-1 Security update for vim

This update for vim fixes the following issues: - CVE-2022-0318: Fixed heap-based buffer overflow bsc1195004. - CVE-2021-3796: Fixed use-after-free in nvreplace in normal.c bsc1190570. - CVE-2021-3872: Fixed heap-based buffer overflow in winredrstatus drawscreen.c bsc1191893. - CVE-2021-3927: Fix...

CLSA-2022-1644855795 Fixed CVEs in vim: CVE-2022-0359, CVE-2022-0351, CVE-2022-0368, CVE-2022-0361

CVE-2022-0351: fix crash caused by too depth recursion - CVE-2022-0359: fix illegal memory access with large tabstop in ex mode - CVE-2022-0361: fix illegal memory access when copying lines in visual mode - CVE-2022-0368: fix illegal memory access when undo makes visual area invalid...

USN-5247-1 vim vulnerabilities

It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. This issue only affected Ubuntu 21.10. CVE-2021-3973 It was...

Ubuntu 18.04 LTS / 20.04 LTS : Vim vulnerabilities (USN-5247-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5247-1 advisory. It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a special...

USN-5093-1 vim vulnerabilities

Brian Carpenter discovered that vim incorrectly handled memory when opening certain files. If a user was tricked into opening a specially crafted file, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. This issu...

USN-4309-1 vim vulnerabilities

It was discovered that Vim incorrectly handled certain sources. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS CVE-2017-11109 It was discovered that Vim incorrectly handled certain files. An...

Ubuntu 16.04 LTS / 18.04 LTS : Vim vulnerabilities (USN-4016-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4016-1 advisory. It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. This issue...

USN-4016-1 vim vulnerabilities

It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2017-5953 It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to...

SUSE-SU-2016:2942-1 Security update for vim

This update for vim fixes the following security issues: - Fixed CVE-2016-1248 an arbitrary command execution vulnerability bsc1010685 This update for vim fixes the following issues: - Fix build with Python 3.5. bsc988903...

Ubuntu 4.10 : vim vulnerabilities (USN-61-1)

Javier Fernandez-Sanguino Pena noticed that the auxillary scripts 'tcltags' and 'vimspell.sh' created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the script either by calling it...