Medium: vim

Issue Overview: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Affected Packages: vim Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

Vim < 9.0.2010 Use-After-Free

Use After Free in GitHub repository vim/vim prior to v9.0.2010. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid183414; scriptversion"1.4";...

CVE-2023-5535 affecting package vim for versions less than 9.0.2010-1

CVE-2023-5535 affecting package vim for versions less than 9.0.2010-1. A patched version of the package is available...

CVE-2023-5344 affecting package vim for versions less than 9.0.2010-1

CVE-2023-5344 affecting package vim for versions less than 9.0.2010-1. A patched version of the package is available...

CVE-2023-5441 affecting package vim for versions less than 9.0.2010-1

CVE-2023-5441 affecting package vim for versions less than 9.0.2010-1. A patched version of the package is available...

Important Photon OS Security Update - PHSA-2023-4.0-0492

Updates of 'libxml2', 'vim' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0119

Updates of 'libxml2', 'vim' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0119

Updates of 'vim', 'libxml2' packages of Photon OS have been released...

Fedora: Security Advisory for vim (FEDORA-2023-c0da722865)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 ESM : Neovim vulnerability (USN-4862-1)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4862-1 advisory. It was discovered that Neovim incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

OESA-2023-1721 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Restricted vim sandbox escape

Description Restricted vim doesn't allow executing shell commands but it's possible to bypass this by setting GCONVPATH environment variable. I'm not sure if this can be consider a vulnerability but I decided to report it anyway found this while playing TeamItaly CTF . Proof of Concept Save this...

[SECURITY] Fedora 37 Update: vim-9.0.1984-1.fc37

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Vim Resource Management Error Vulnerability (CNVD-2024-40469)

Vim is a highly configurable text editor designed to efficiently create and change any type of text . As an improved version of vi many new features have been added: multi-level undo, syntax highlighting, command line history, online help, spell checking, filename completion, block manipulation, ...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2998)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2972)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2023-5535

Use After Free in GitHub repository vim/vim prior to v9.0.2010...

The vulnerability of the trunc_string() function in the Vim text editor, allowing a hacker to cause a service failure

The vulnerability of the truncstring function in the Vim text editor is related to buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

USN-6154-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim was using uninitialized memory when fuzzy matching, which could lead to invalid memory access. An attacker could possibly use this...

Fedora 37 : vim (2023-c0da722865)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c0da722865 advisory. patchlevel 1984 ---- The newest upstream commit Tenable has extracted the preceding description block directly from the Fedora security advisory. No...