10629 matches found
Fedora: Security Advisory for vim (FEDORA-2022-fc4c513d06)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Vim Heap Buffer Overflow DoS
The vulnerability of the Vim text editor is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service interruptions...
CVE-2022-4293
A floating point exception flaw was found in Vim's numdivide function of the eval.c file. This issue occurs when dividing the largest negative number by -1. This could allow an attacker to trick a user into opening a specially crafted file, triggering an application to crash and leading to a deni...
CVE-2022-4292
A heap use-after-free flaw was found in Vim's didsetspelllang function of the spell.c file. This issue occurs because vim uses freed memory after SpellFileMissing autocmd uses bwipe. This could allows an attacker to trick a user into opening a specially crafted file, triggering a heap...
[SECURITY] Fedora 37 Update: vim-9.0.1006-1.fc37
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Fedora: Security Advisory for vim (FEDORA-2022-1e14f3ae45)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Amazon Linux 2 : vim (ALAS-2022-1902)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1902 advisory. 2024-02-01: CVE-2022-3591 was added to this advisory. 2024-02-01: CVE-2022-3520 was added to this advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-352...
CVE-2022-4141 affecting package vim 9.0.0805-1
CVE-2022-4141 affecting package vim 9.0.0805-1. An upgraded version of the package is available that resolves this issue...
Important: vim
Issue Overview: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3520 Use After Free in GitHub repository vim/vim prior to 9.0.0789. CVE-2022-3591 A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuff...
ALPINE-CVE-2022-4293
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804...
DEBIAN-CVE-2022-4292
Use After Free in GitHub repository vim/vim prior to 9.0.0882...
CVE-2022-4292
Use After Free in GitHub repository vim/vim prior to 9.0.0882...
ALPINE-CVE-2022-4292
Use After Free in GitHub repository vim/vim prior to 9.0.0882...
DEBIAN-CVE-2022-4293
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804...
CVE-2022-4293
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804...
UBUNTU-CVE-2022-4292
Use After Free in GitHub repository vim/vim prior to 9.0.0882...
UBUNTU-CVE-2022-4293
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804...
CVE-2022-4292
Use After Free in GitHub repository vim/vim prior to 9.0.0882...
Use After Free
vim is vulnerable to use after free. The vulnerability exists in dobufferext function of buffer.c due to dummy buffer ends up in a window which allows a remote attacker to potentially exploit heap corruption via malicious input...
CVE-2022-3491
A heap-based buffer overflow flaw was found in Vim's skipwhite function of the charset.c file. This issue occurs when reading data past the end of the line when compiling a function with errors. This could allows an attacker to trick a user into opening a specially crafted file, triggering an...