Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1283)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2022-4.0-0158

Updates of 'expat', 'wireshark', 'vim' packages of Photon OS have been released...

Use of Out-of-range Pointer Offset in vim/vim

...

Vulnerability of the ex_retab() function (indent.c) in the Vim text editor, allowing a hacker to execute arbitrary code

The vulnerability of the exretab function in the vim text editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the src/ex_cmds.c component of the text editor Vim, allowing a hacker to execute arbitrary code.

The vulnerability of the src/excmds.c component of the text editor Vim relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the NameBuff function in the Vim text editor allows a hacker to trigger buffer overflow.

The vulnerability of the NameBuff function in the Vim text editor arises due to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow...

ROS-20220301-02

Vim text editor vulnerability, related to NULL pointer dereferencing error in Vim when switching tabs in command line window. when switching tabs in a command line window. Exploitation of the vulnerability could allow an attacker, remotely to perform a denial-of-service DoS attack...

The vulnerability of the ex_cmds.c component of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the excmds.c component of the Vim text editor arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EulerOS 2.0 SP5 : vim (EulerOS-SA-2022-1283)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3927, CVE-2021-3984, CVE-2021-4019 - vim is vulnerable to Use of Uninitialized Variable...

Vulnerability of the utf_head_off() function (mbyte.c) in the Vim text editor, allowing a hacker to trigger buffer overflow

The vulnerability of the utfheadoff function mbyte.c in the Vim text editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to trigger a buffer overflow...

The vulnerability of the spellsuggest.c component of the Vim text editor allows a hacker to trigger a buffer overflow.

The vulnerability of the spellsuggest.c component of the Vim text editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a buffer overflow...

Vulnerability of the init_ccline() function (ex_getln.c) in the Vim text editor, allowing a hacker to trigger buffer overflow attacks

The vulnerability of the initccline function exgetln.c in the Vim text editor is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow...

Vulnerability of the block_insert() function (src/ops.c) in the Vim text editor, allowing a hacker to trigger buffer overflow

The vulnerability of the blockinsert function src/ops.c is caused by buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to trigger a buffer overflow...

The vulnerability of the ex_open() function (src/ex_docmd.c) in the Vim text editor, which allows an attacker to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the exopen function src/exdocmd.c in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

Vulnerability of the eval_lambda() function (src/eval.c) in the Vim text editor, which allows a hacker to trigger a buffer overflow.

The vulnerability of the evallambda function src/eval.c in the Vim text editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to trigger a buffer overflow...

The vulnerability of the yank_copy_line function in the Vim text editor allows a hacker to trigger buffer overflow.

The vulnerability of the yankcopyline function in the Vim text editor is related to writing beyond the buffer’s boundaries into memory. Exploiting this vulnerability can allow an attacker to cause a buffer overflow...

The vulnerability of the win_lbr_chartabsize() function in the Vim text editor, which allows a hacker to cause a service failure

The vulnerability of the winlbrchartabsize function in the Vim text editor is related to the occurrence of an operation outside the buffer during the use of the “vartabstop” value. Exploiting this vulnerability can allow a hacker to cause a service failure using a specially created file...

Vulnerability of the getexmodeline() function (ex_getln.c) in the Vim text editor, allowing an attacker to trigger a buffer overflow

The vulnerability of the getexmodeline function exgetln.c in the Vim text editor is related to writing beyond the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a buffer overflow...

The vulnerability of the Vim text editor lies in its access to memory cells before the buffer starts, allowing an attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Vim text editor relates to access to memory cells prior to the buffer’s start. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the compile_def_function() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the compiledeffunction function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...