Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2014)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1984)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2022-0493

Updates of 'nxtgn-openssl', 'vim' packages of Photon OS have been released...

CVE-2022-2343

CVE-2022-2343 is a heap-based buffer overflow in Vim (vim/vim) prior to 9.0.0044. The vulnerability involves ins_compl_add in insexpand.c and related paths, with exploitation possible by opening a specially crafted file which can crash Vim and may corrupt memory or allow code execution. The Conne...

CVE-2022-2344

CVE-2022-2344 is a heap-based buffer overflow in vim/vim prior to 9.0.0045. The connected advisories/bulletins identify Vim as affected and describe a heap-based overflow arising when processing crafted input files. The primary root cause is memory handling in Vim leading to crashes or memory cor...

Fixed CVEs in vim: CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

CLSA-2022-1657182572 Fixed CVEs in vim: CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

CLSA-2022-1657182377 Fixed CVEs in vim: CVE-2022-2129, CVE-2022-2125, CVE-2022-1720, CVE-2022-2124, CVE-2022-2126

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

NULL Pointer Dereference in vim/vim

...

Out-of-bounds Write in vim/vim

...

Heap-based Buffer Overflow in vim/vim

...

Important Photon OS Security Update - PHSA-2022-0415

Updates of 'vim', 'mysql', 'nxtgn-openssl' packages of Photon OS have been released...

Oracle Linux 9 : vim (ELSA-2022-5242)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5242 advisory. - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior -...

Vim Buffer Overflow Vulnerability (CNVD-2022-68101)

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 9.0.0035, which stems from a boundary error in the spelldumpcompl function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the syste...

Important Photon OS Security Update - PHSA-2022-3.0-0415

Updates of 'vim', 'nxtgn-openssl', 'mysql' packages of Photon OS have been released...

Heap-based buffer overflow in function ins_compl_add

Description Heap-based buffer overflow in function inscompladd at insexpand.c:751 Version commit b8329db36a886355e6e9cb9986a3668fef78c438 HEAD - master, tag: v9.0.0044 Proof of Concept guest@elk:/trung$ valgrind ./vimlatest/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./poc/poc42min -c :qa!...

CVE-2022-2304

A stack-based buffer overflow vulnerability was found in Vim's spelldumpcompl function of the src/spell.c file. This issue occurs because the spell dump goes beyond the end of an array when crafted input is processed. This flaw allows an attacker to trick a user into opening a specially crafted...

Heap Use After Free in function skipwhite

Description Heap Use After Free in function skipwhite at charset.c:1428 vim version git log commit 324478037923feef1eb8a771648e38ade9e5e05a HEAD - master, tag: v9.0.0042, origin/master, origin/HEAD POC ./afl/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochuaf4s.dat -c :qa!...

PT-2022-5218 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.0.0046 Description: The issue is related to a use after free error in the skipwhite function of the charset.c component in the Vim text editor. This could allow a remote attacker to access sensitive data, compromise da...

Vim Buffer Overflow Vulnerability (CNVD-2022-68102)

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 9.0, which stems from a boundary error in parsecommandmodifiers when handling untrusted input. A remote attacker could exploit this vulnerability to cause data corruption, crash, or code executio...