CVE-2023-48232 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48232 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48236 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48236 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48233 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48233 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48237 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48237 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48231 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48231 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48234 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48234 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-46246 affecting package vim for versions less than 9.0.2112-1

CVE-2023-46246 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

Amazon Linux AMI : vim (ALAS-2023-1893)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1893 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

Low: vim

Issue Overview: Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in...

Amazon Linux 2 : vim (ALAS-2023-2353)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2353 advisory. Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be...

USN-6452-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected...

Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite

...

OESA-2023-1874 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

The vulnerability of the Vim text editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Use After Free

Vim is vulnerable to Heap Based Use After Free. The vulnerability is caused when executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part causing a free-ing of the memory because of recursive :s call which may later be accessed by the initia...

Vim < 9.0.2108

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in releas...

Vim < 9.0.2107

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...

Vim < 9.0.2121

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...

Vim < 9.0.2106

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in release version 9.0.2106. Note that Nessus has not tested for...