CVE-2023-46246 Integer Overflow in :history command in Vim

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist.c at line 759...

Vim 资源管理错误漏洞

Vim is a cross-platform text editor. Vim suffers from a memory misreference vulnerability that originates from a messed up instruction in the function gagrowinner in file src/alloc.c that is responsible for freeing memory. An attacker can exploit the vulnerability which may lead to program crash,...

CLSA-2023-1698352063 vim: Fix of 2 CVEs

CVE-2023-5441: segfault in exmode - CVE-2023-5344: buffer overflow in truncstring...

vim: Fix of 2 CVEs

CVE-2023-5441: segfault in exmode - CVE-2023-5344: buffer overflow in truncstring...

CLSA-2023-1698351940 vim: Fix of 2 CVEs

CVE-2023-5441: segfault in exmode - CVE-2023-5344: buffer overflow in truncstring...

Ubuntu: Security Advisory (USN-6452-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vim < 9.0.1992 NULL Pointer Dereference

NULL pointer dereference in GitHub repository vim/vim prior to v9.0.1992. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid183880;...

Slackware: Security Advisory (SSA:2023-297-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Vim vulnerabilities (USN-6452-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6452-1 advisory. It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue...

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.2063-i586-1slack15.0.txz: Upgraded. Fixed use-after-free security issue. Thanks to marav for the heads-up. For more information,...

Medium: vim

Issue Overview: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Affected Packages: vim Issue Correction: Run dnf update vim --releasever 2023.2.20231018 or dnf update --advisory ALAS2023-2023-378 --releasever 2023.2.20231018 to update your system. More...

Fedora: Security Advisory for vim (FEDORA-2023-6c84e57fab)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-378)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-378 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Tenable has extracted the preceding description block directly from the tested product security advisory. Note th...

Slackware Linux 15.0 / current vim Vulnerability (SSA:2023-297-02)

The version of vim installed on the remote host is prior to 9.0.2063. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-297-02 advisory. - Use After Free in GitHub repository vim/vim prior to v9.0.2010. CVE-2023-5535 Note that Nessus has not tested for this issue but has...

Fedora: Security Advisory for vim (FEDORA-2023-e9c71abc95)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: vim-9.0.2048-1.fc38

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

[SECURITY] Fedora 37 Update: vim-9.0.2048-1.fc37

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Fedora 38 : vim (2023-6c84e57fab)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6c84e57fab advisory. Security fix for CVE-2023-5535, CVE-2023-5441 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 37 : vim (2023-e9c71abc95)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e9c71abc95 advisory. Security fix for CVE-2023-5535, CVE-2023-5441 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Advisory ROSA-SA-2023-2268

software: vim 9.0.1572 WASP: ROSA-CHROME packageevrstring: vim-9.0.1572-1.src.rpm CVE-ID: CVE-2023-0049 BDU-ID: 2023-00068 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the buildstlstrhl buffer.c function of the Vim text editor is related to an operation exceeding buffer boundaries in memory...