Medium: vim

Issue Overview: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory...

CVE-2024-22667

CVE-2024-22667 affects Vim prior to 9.0.2142. The root cause is a stack-based buffer overflow in map.c did_set_langmap where sprintf writes to the error buffer passed to option callbacks. Public descriptions indicate vulnerable versions are before 9.0.2142; a patch exists in 9.0.2142+ (examples n...

Vim Installed (Linux)

Binary data vimnixinstalled.nbin...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1130)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1114)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2024-1130)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2024-1114)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-3288)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...

EulerOS Virtualization 2.11.0 : vim (EulerOS-SA-2023-2777)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. CVE-2023-1264 - Use of Out-of-range Pointer Offset in GitHu...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-3320)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-3352)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...

EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2023-2972)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. CVE-2023-2426 - NULL Pointer Dereference in GitHu...

EulerOS Virtualization 2.11.1 : vim (EulerOS-SA-2023-2746)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. CVE-2023-1264 - Use of Out-of-range Pointer Offset in GitHu...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-3198)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-2714)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. CVE-2023-1264 - Use of Out-of-range Pointer Offset in GitHub repository...

EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2023-3486)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-2672)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. CVE-2023-1264 - Use of Out-of-range Pointer Offset in GitHub repository...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-3260)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2024-1099)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2023-3163)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. CVE-2023-1175 - Integer Overflow or Wraparound in GitHub...