8877 matches found
Use After Free
Vim is vulnerable to Heap Based Use After Free. The vulnerability is caused when executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part causing a free-ing of the memory because of recursive :s call which may later be accessed by the initia...
Vim < 9.0.2107
Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...
Vim < 9.0.2108
Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in releas...
Vim < 9.0.2121
Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...
Vim < 9.0.2106
Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in release version 9.0.2106. Note that Nessus has not tested for...
Vim < 9.0.2109
Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in release version 9.0.2109. Not...
Vim < 9.0.2110
Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...
Buffer Overflow
Vim is vulnerable to Buffer Overflow. The vulnerability is due to an improper bound checking while parsing relative ex addresses. This issue can be exploited by an attacker to cause a buffer overflow leading to DoS...
Integer Overflow
vim is vulnerable to Integer Overflow. The vulnerability is due to there is no validation or checks when obtaining the count for a normal mode z command. This allows an attacker to create a overflow especially with large counts...
Integer Overflow
Vim is vulnerable to Integer Overflow Vulnerability. The vulnerability is due to improper bound checking while using z= command. The attacker can trigger a crash by entering a number larger than MAXINT, which leads to DoS...
Denial Of Service (DoS)
Vim is vulnerable to Denial of Service DoS. The vulnerability is due to shifting lines in operator pending mode while using a very large value, which results in overflowing the buffer allocated for the shiftline integer...
Denial Of Service
Vim is vulnerable to Denial Of Service. The vulnerability is due to a floating point exception caused while calculating the line offset for overlong lines, with smooth scrolling and cpo-settings enabled...
Use-After-Free
vim is vulnerable to Use-After-Free. The vulnerability occurs when closing windows due to a memory access issue resulting in malicious attackers being able to crash the application or potentially even gain control of the system...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2023:4587-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4587-1 advisory. - CVE-2023-5344: Heap-based Buffer Overflow in vim prior to 9.0.1969 bsc1215940 - CVE-2023-5441:...
SUSE: Security Advisory (SUSE-SU-2023:4587-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:4587-1 Security update for vim
This update for vim fixes the following issues: - CVE-2023-5344: Heap-based Buffer Overflow in vim prior to 9.0.1969 bsc1215940 - CVE-2023-5441: segfault in exmode when redrawing bsc1216001 - CVE-2023-5535: use-after-free from bufcontentschanged bsc1216167 - CVE-2023-46246: Integer Overflow in...
SUSE: Security Advisory (SUSE-SU-2023:4560-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for vim (FEDORA-2023-ce3f7d4818)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for vim (FEDORA-2023-eec2cdb7ed)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2023-328-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...