8868 matches found
CVE-2022-2923
CVE-2022-2923 is a NULL pointer dereference in Vim prior to 9.0.0240. Multiple Bulletins (e.g., AWS ALAS2-2022-1868 and Astra Linux advisory) reference Vim and list the impact as potential crash or code execution. The NVD metrics rate CVSS v3.1 as 5.5 (Medium), with Local attack vector, Low attac...
GLSA-202208-32 : Vim, gVim: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202208-32 Vim, gVim: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Vim and gVim. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...
Vim, gVim: Multiple Vulnerabilities
Background Vim is an efficient, highly configurable improved version of the classic ‘vi’ text editor. gVim is the GUI version of Vim. Description Multiple vulnerabilities have been discovered in Vim and gVim. Please review the CVE identifiers referenced below for details. Impact Please review the...
[slackware-security] vim
New vim packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-8.2.4649-i586-3slack15.0.txz: Rebuilt. Fix use after free. Thanks to marav for the heads-up. For more information, see:...
Use After Free in vim/vim
...
CVE-2022-2889
A use-after-free vulnerability was found in Vim in the findvaralsoinscript function in the evalvars.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted fil...
Out-of-bound Read
vim is vulnerable to out-of-bound read vulnerability. The vulnerability exists in the checkvim9unlet function in src/vim9cmds.c which allows a malicious attacker to read sensitive data in the system...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. A malicious user is able to cause the application to crash due to a heap-based buffer overflow in function compilelockunlock in vim/src/vim9cmds.c...
CVE-2022-2845
Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
AZL-10596 CVE-2022-2889 affecting package vim for versions less than 9.0.0325-1
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
DEBIAN-CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
UBUNTU-CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
NULL Pointer Dereference in vim/vim
...