CVE-2024-43374

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers "Buf" autocommands. If in such an autocommand the buffer that was just opened is closed including the window where it is shown, this cause...

CVE-2024-43374

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers Buf autocommands. If in such an autocommand the buffer that was just opened is closed including the window where it is shown, this causes...

CVE-2024-43374 Vim heap-use-after-free in src/arglist.c:207

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers Buf autocommands. If in such an autocommand the buffer that was just opened is closed including the window where it is shown, this causes...

CVE-2024-43374 Vim heap-use-after-free in src/arglist.c:207

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers Buf autocommands. If in such an autocommand the buffer that was just opened is closed including the window where it is shown, this causes...

CVE-2024-43374

Vim (open source editor) prior to version 9.1.0678 contains a use-after-free in argument list handling. When adding a new file to the argument list, Buf* autocommands may open a buffer that is subsequently closed, freeing the window structure that references the argument list being modified. Afte...

PT-2024-6176

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.0678 Description The issue is related to a use-after-free error in argument list handling. When adding a new file to the argument list, it triggers Buf autocommands. If in such an autocommand the buffer that was just...

CVE-2024-41965 affecting package vim for versions less than 9.0.2190-4

CVE-2024-41965 affecting package vim for versions less than 9.0.2190-4. A patched version of the package is available...

CVE-2024-41957 affecting package vim for versions less than 9.0.2190-4

CVE-2024-41957 affecting package vim for versions less than 9.0.2190-4. A patched version of the package is available...

Vim < 9.1.0648 Double-Free

According to its version, the version of Vim installed on the remote host is prior to 9.1.0648. It is, therefore affected by a double free vulnerability. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may...

[SECURITY] Fedora 39 Update: vim-9.1.660-1.fc39

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Fedora 39 : vim (2024-5e87ad4678)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5e87ad4678 advisory. The newest upstream commit Security fixes for CVE-2024-41957, CVE-2024-41965 Tenable has extracted the preceding description block directly from the...

Fedora: Security Advisory (FEDORA-2024-5e87ad4678)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vim < 9.1.0647 Use-After-Free

According to its version, the version of Vim installed on the remote host is prior to 9.1.0647. It is, therefore affected by a use-after-free vulnerability. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues. This package has been removed from the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediatio...

[SECURITY] Fedora 40 Update: vim-9.1.660-1.fc40

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Fedora: Security Advisory (FEDORA-2024-fe5420ed3f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : vim (2024-fe5420ed3f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fe5420ed3f advisory. The newest upstream commit Security fixes for CVE-2024-41965, CVE-2024-41957 Tenable has extracted the preceding description block directly from the...

SUSE CVE-2024-41957

Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points...

SUSE CVE-2024-41965

Vim is an open source command line text editor. double-free in dialogchanged in Vim v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a nam...

CVE-2024-41957

A double-free and use-after-free vulnerability was found in the Vim editor. This flaw exists due to the corresponding tagstack being used twice when closing the window and if the quick fix list belonging to that window is also cleared using the same tagstack data. In this instance, Vim will try t...