CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

UBUNTU-CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

CVE-2022-1154 Use after free in utf_ptr2char in vim/vim

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

CVE-2022-1160

CVE-2022-1160 affects Vim/vim: heap-based buffer overflow in get_one_sourceline (scriptfile.c) when source can read past the end of the copied line, leading to crashes or denial of service. Affected: Vim prior to 8.2.4647. Mitigation: upgrade to a version where this is fixed (e.g., 8.2.4647 or ne...

CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

CVE-2022-1154

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

CVE-2022-1154

CVE-2022-1154 affects Vim (vim/vim) and is caused by a use-after-free in utf_ptr2char prior to 8.2.4646. The issue can crash Vim and, per advisories, may allow code execution. Remediation/vendoring details are not in the Initial Description; connected advisories note fixes/upgrades but do not spe...

CVE-2022-1160 heap buffer overflow in get_one_sourceline in vim/vim

heap buffer overflow in getonesourceline in GitHub repository vim/vim prior to 8.2.4647...

vim 资源管理错误漏洞

vim is an editor for UNIX-based platforms. A resource management error vulnerability exists in versions of vim prior to 8.2.4646, which stems from a post-release reuse vulnerability in the utfptr2char function...

CVE-2022-1160

heap buffer overflow in getonesourceline in GitHub repository vim/vim prior to 8.2.4647...

vim 缓冲区错误漏洞

vim is an editor for UNIX-based platforms. A security vulnerability exists in vim that stems from a heap buffer overflow in the getonesource line...

CVE-2022-1154 Use after free in utf_ptr2char in vim/vim

Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646...

CVE-2022-1160

heap buffer overflow in getonesourceline in GitHub repository vim/vim prior to 8.2.4647...

[SECURITY] Fedora 36 Update: vim-8.2.4621-1.fc36

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1363)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for vim (FEDORA-2022-b718ebbfce)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Important Photon OS Security Update - PHSA-2022-0457

Updates of 'vim', 'go' packages of Photon OS have been released...

heap buffer overflow in get_one_sourceline

Description When fuzzing vim commit 471b3aed3 I discovered a heap buffer overflow. I'm using ubuntu 20.04 with clang 13 Proof of Concept Here is the minimized poc bash norm300gr0 so How to build bash LD=lld AS=llvm-as AR=llvm-ar RANLIB=llvm-ranlib CC=clang CXX=clang++ CFLAGS="-fsanitize=address"...

Use after free in utf_ptr2char

✍️ Description When fuzzing vim commit 9dac9b175, I discovered a use after free. I'm testing on ubuntu 20.04 with clang 13. Proof of Concept Here is the minimized poc bash s/\v/\r /%',600 How to build bash LD=lld AS=llvm-as AR=llvm-ar RANLIB=llvm-ranlib CC=clang CXX=clang++...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1363)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 Note that Tenable Network...