Ubuntu 16.04 LTS / 18.04 LTS : Vim vulnerabilities (USN-4582-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4582-1 advisory. It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensiti...

OESA-2023-1749 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Amazon Linux 2 : vim (ALAS-2023-2288)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2288 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that...

Important Photon OS Security Update - PHSA-2023-3.0-0671

Updates of 'vim', 'libxml2' packages of Photon OS have been released...

Denial Of Service (DoS)

vim is vulnerable to Denial Of Service DoS. This vulnerability allows an attacker to exploit a specially crafted file to trigger a NULL pointer dereference, causing the application to crash...

Denial Of Service (DoS)

vim is vulnerable to Denial Of Service DoS. This vulnerability allows an attacker to exploit a Heap-based Buffer Overflow, causing the application to crash...

Medium: vim

Issue Overview: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Affected Packages: vim Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

Vim < 9.0.2010 Use-After-Free

Use After Free in GitHub repository vim/vim prior to v9.0.2010. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid183414; scriptversion"1.4";...

CVE-2023-5535 affecting package vim for versions less than 9.0.2010-1

CVE-2023-5535 affecting package vim for versions less than 9.0.2010-1. A patched version of the package is available...

CVE-2023-5344 affecting package vim for versions less than 9.0.2010-1

CVE-2023-5344 affecting package vim for versions less than 9.0.2010-1. A patched version of the package is available...

CVE-2023-5441 affecting package vim for versions less than 9.0.2010-1

CVE-2023-5441 affecting package vim for versions less than 9.0.2010-1. A patched version of the package is available...

Important Photon OS Security Update - PHSA-2023-4.0-0492

Updates of 'libxml2', 'vim' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0119

Updates of 'libxml2', 'vim' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0119

Updates of 'vim', 'libxml2' packages of Photon OS have been released...

Fedora: Security Advisory for vim (FEDORA-2023-c0da722865)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 ESM : Neovim vulnerability (USN-4862-1)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4862-1 advisory. It was discovered that Neovim incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

OESA-2023-1721 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Restricted vim sandbox escape

Description Restricted vim doesn't allow executing shell commands but it's possible to bypass this by setting GCONVPATH environment variable. I'm not sure if this can be consider a vulnerability but I decided to report it anyway found this while playing TeamItaly CTF . Proof of Concept Save this...

[SECURITY] Fedora 37 Update: vim-9.0.1984-1.fc37

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Vim Resource Management Error Vulnerability (CNVD-2024-40469)

Vim is a highly configurable text editor designed to efficiently create and change any type of text . As an improved version of vi many new features have been added: multi-level undo, syntax highlighting, command line history, online help, spell checking, filename completion, block manipulation, ...