Vim 资源管理错误漏洞

Vim, a cross-platform text editor, is vulnerable to a resource management error in versions prior to Vim 8.2.4895, which stems from a confusion in the appendcommand program's command for freeing memory. An attacker could use this vulnerability to crash the program, execute arbitrary code, etc...

Use of Out-of-range Pointer Offset in vim/vim

...

UBUNTU-CVE-2022-1420

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774...

AZL-9487 CVE-2022-1381 affecting package vim for versions less than 8.2.4925-1

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

DEBIAN-CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CLSA-2022-1649170853 Fixed CVE-2022-0943 in vim

CVE-2022-0943: fix heap-based buffer overflow...

Use after free in utf_ptr2char in vim/vim

...

F5 Networks BIG-IP : Vim vulnerability (K08827426)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K08827426 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0359ImpactThis vulnerability...

AZL-9211 CVE-2022-1160 affecting package vim for versions less than 8.2.4743-1

heap buffer overflow in getonesourceline in GitHub repository vim/vim prior to 8.2.4647...

CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

UBUNTU-CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

vim 缓冲区错误漏洞

vim is an editor for UNIX-based platforms. A security vulnerability exists in vim that stems from a heap buffer overflow in the getonesource line...

ALPINE-CVE-2022-0943

Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563...

CVE-2022-0943

Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to a Heap-based Buffer Overflow which allows an attacker to cause an application crash...

The vulnerability of the Vim text editor, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the Vim text editor is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

Vulnerability of the utf_head_off() function (mbyte.c) in the Vim text editor, allowing a hacker to trigger buffer overflow

The vulnerability of the utfheadoff function mbyte.c in the Vim text editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to trigger a buffer overflow...

The vulnerability of the win_linetabsize() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the winlinetabsize function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the Vim text editor lies in its access to memory cells before the buffer starts, allowing an attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Vim text editor relates to access to memory cells prior to the buffer’s start. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...