Fedora: Security Advisory (FEDORA-2023-1c2c29a683)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2023-1653 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

The vulnerability of the `vim regsub_both` function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the vim regsubboth function in the Vim text editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Vim text editor arises from buffer overflows on the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the Vim text editor arises from buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Vim text editor lies in the use of an insecure search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of an unreliable search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...

The vulnerability of the f_fullcommand function in the Vim text editor, caused by integer overflow, allows a hacker to execute arbitrary code.

The vulnerability of the ffullcommand function in the Vim text editor is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the ins-compl_get_exp function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the ins-complgetexp function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to perform arbitrary commands...

The vulnerability of the Vim text editor, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the bt_quickfix function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the buflist_altfpos function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the buflistaltfpos function in the Vim text editor relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Vim text editor, related to a division by zero error, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to a division by zero error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim 9.0.1846 that stems from the presence of an integer overflow or wrap-around issue. A remote attacker can exploit this vulnerability by sending a malicious HTTP or HTTPS request to execute...

Vim buffer overflow vulnerability (CNVD-2023-70067)

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions prior to vim 9.0.1847, which stems from an out-of-bounds write problem. An unauthenticated attacker can exploit this vulnerability to execute arbitrary code...

The vulnerability of the vim regs sub both() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vim regsubboth function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Fedora: Security Advisory for vim (FEDORA-2023-6436d808d4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2023-254-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2023-3.0-0647

Updates of 'vim' packages of Photon OS have been released...

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.1897-i586-1slack15.0.txz: Upgraded. Fixed three use-after-free security issues. Thanks to marav for the heads-up. For more...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2023-254-01)

The version of vim installed on the remote host is prior to 9.0.1897. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-254-01 advisory. - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Use After Free in GitHub repository vim/vim...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2746)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...