8852 matches found
UBUNTU-CVE-2022-2206
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
Null pointer dereference in function skipwhite
Description Null pointer dereference in function skipwhite at charset.c:1428 Version commit c101abff4c6756db4f5e740fde289decb9452efa HEAD - master, tag: v8.2.5164 Proof of Concept guest@elk:/trung$ valgrind ./vimlatest/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./poc/poc40min -c :qa! ==32519==...
Information Disclosure
vim is vulnerable to information disclosure. Buffer over-read in the currentquote function allows local attackers to cause information disclosure...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to the usage of invalid index when looking for spell suggestions which causes out-of-bound reads which then lead to an application crash...
Information Disclosure
vim is vulnerable to information disclosure. A buffer over-read in function grabfilename is capable of crashing the software, memory modification, and possible remote execution...
Use-After-Free
vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...
CVE-2022-1796 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1796 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1898 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1898 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1771 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1771 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1886 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1886 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1785 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1785 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1674 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1674 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1735 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1735 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1851 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1851 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1769 affecting package vim for versions less than 8.2.5064-1
CVE-2022-1769 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 8.2, which stems from a boundary error in the msgouttransattr function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...
CVE-2022-2206
CVE-2022-2206 is an Out-of-bounds Read in vim/vim prior to 8.2. Connected advisories (e.g., Astra Linux security bulletin and ALAS entries) confirm Vim’s memory access flaw causing potential crash or memory disclosure when opening crafted files. The vulnerability affects Vim across Linux distribu...
