Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5963-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5963-1 advisory. It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2206)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2206 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. CVE-2022-2206 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2257)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2257 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2257 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: vim (CVE-2023-0288)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0288 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. CVE-2023-0288 Note that Nessus has no...

CBL Mariner 2.0 Security Update: vim (CVE-2021-3974)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3974 advisory. - vim is vulnerable to Use After Free CVE-2021-3974 Note that Nessus has not tested for this issue but has instead...

Fedora 38 : vim (2023-43cb13aefb)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-43cb13aefb advisory. Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264. Tenable has extracted the preceding description block directly from the Fedora...

CBL Mariner 2.0 Security Update: vim (CVE-2022-1420)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1420 advisory. - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774. CVE-2022-1420 Note that Nessu...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2345)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2345 advisory. - Use After Free in GitHub repository vim/vim prior to 9.0.0046. CVE-2022-2345 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: vim (CVE-2023-0433)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0433 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. CVE-2023-0433 Note that Nessus has no...

Fedora 37 : vim (2023-d4ebe53978)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d4ebe53978 advisory. The newest upstream commit Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264. Tenable has extracted the preceding description block...

CBL Mariner 2.0 Security Update: vim (CVE-2023-0051)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0051 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. CVE-2023-0051 Note that Nessus has no...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2289)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2289 advisory. - Use After Free in GitHub repository vim/vim prior to 9.0. CVE-2022-2289 Note that Nessus has not tested for this...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2304)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2304 advisory. - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. CVE-2022-2304 Note that Nessus has not...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2023-079-02)

The version of vim installed on the remote host is prior to 9.0.1418. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-079-02 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer...

CBL Mariner 2.0 Security Update: vim (CVE-2023-0512)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0512 advisory. - Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. CVE-2023-0512 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: vim (CVE-2021-3973)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3973 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3973 Note that Nessus has not tested for this issue but...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2285)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2285 advisory. - Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. CVE-2022-2285 Note that Nessus has not...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1543)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 - Heap-based Buffer Overflow in GitHub repository vim/vim...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1568)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 - Heap-based Buffer Overflow in GitHub repository vim/vim...

heap-buffer-overflow in vim_strrchr

Description heap based buffer overflow in vimstrrchr at strings.c:682 Vim Version git log commit ea83c194625e51c28a2796eba9ba87b0b9ab23e0 HEAD - master, tag: v9.0.1414, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S POCvimstrrchr -c :qa!...