Denial Of Service (DoS)

vim:sid is vulnerable to denial of service. A buffer over-read in GitHub repository is caused due to lack proper computation of text length...

Denial Of Service (DoS)

vim is vulnerable to denial of service attack. The vulnerability exist in the vimregexecstring function in regexp.cdue to null point deferences, allows attackers to cause a system crash via a crafted input...

Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Out-of-bounds Write CVE-2022-1785 vim: out-of-bounds write in vimregsubboth in regexp.c CVE-2022-1897 vim: buffer over-read in utfptr2char in mbyte.c CVE-2022-1927 For more details about the security issues,...

RHEL 9 : vim (RHSA-2022:5942)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5942 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Out-of-bounds Write CVE-2022-1785 vim: out-of-boun...

ALSA-2022:5942 Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Out-of-bounds Write CVE-2022-1785 vim: out-of-bounds write in vimregsubboth in regexp.c CVE-2022-1897 vim: buffer over-read in utfptr2char in mbyte.c CVE-2022-1927 For more details about the security issues,...

Out-Of-Bounds Read

vim:sid is vulnerable to out of bounds read. A remote attacker is able to perform out of bound reads...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. An out-of-bounds write vulnerability in vimregsubboth function in the src/regexp.c file allows remote attackers to cause an application crash, possibly reading and modifying some amount of memory contents...

Oracle Linux 8 : vim (ELSA-2022-5813)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5813 advisory. - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vimregsubboth in regexp.c Tenable has extracted the preceding...

OESA-2022-1810 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Out-of-bounds Write to API in vim/vim

...

Heap-based Buffer Overflow in vim/vim

...

Heap-based Buffer Overflow in vim/vim

...

Out-of-bounds Read in vim/vim

...

CLSA-2022-1659639100 Fixed CVEs in vim: CVE-2022-2345, CVE-2022-2344, CVE-2022-2343, CVE-2022-2522

CVE-2022-2345: fix using freed memory with recursive substitute - CVE-2022-2344: fix reading past end of completion with duplicate match - CVE-2022-2343: fix reading past end of completion with a long line and 'infercase' set - CVE-2022-2522: fix accessing uninitialized memory when completing...

CLSA-2022-1659637855 Fixed CVEs in vim: CVE-2022-2344, CVE-2022-2345, CVE-2022-2522, CVE-2022-2343

CVE-2022-2345: fix using freed memory with recursive substitute - CVE-2022-2344: fix reading past end of completion with duplicate match - CVE-2022-2343: fix reading past end of completion with a long line and 'infercase' set - CVE-2022-2522: fix accessing uninitialized memory when completing...

vim diff_write_buffer function buffer overflow vulnerability

Vim is a cross-platform text editor. vim suffers from a buffer overflow vulnerability that results from undefined behavior in the diffwritebuffer function. An attacker could exploit this vulnerability to cause a buffer overflow...

Moderate Photon OS Security Update - PHSA-2022-0502

Updates of 'vim' packages of Photon OS have been released...

Vim utf_ptr2char function buffer overflow vulnerability

Vim is a cross-platform text editor. Vim is vulnerable to a buffer overflow vulnerability that stems from a boundary error in the utfptr2char function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...

CVE-2022-2344 affecting package vim for versions less than 9.0.0050-2

CVE-2022-2344 affecting package vim for versions less than 9.0.0050-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-2304 affecting package vim for versions less than 9.0.0050-2

CVE-2022-2304 affecting package vim for versions less than 9.0.0050-2. An upgraded version of the package is available that resolves this issue...