OESA-2023-1901 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

OESA-2023-1902 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

MGASA-2023-0341 Updated vim packages fix security vulnerabilities

The updated packages fix security vulnerabilities When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. CVE-2023-48231 A floating point exception may occur when calculating the line offset for...

Updated vim packages fix security vulnerabilities

The updated packages fix security vulnerabilities When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. CVE-2023-48231 A floating point exception may occur when calculating the line offset for...

CVE-2023-48234 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48234 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48236 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48236 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48233 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48233 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48231 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48231 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48237 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48237 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48232 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48232 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-46246 affecting package vim for versions less than 9.0.2112-1

CVE-2023-46246 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

Amazon Linux AMI : vim (ALAS-2023-1893)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1893 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

Low: vim

Issue Overview: Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in...

Amazon Linux 2 : vim (ALAS-2023-2353)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2353 advisory. Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be...

USN-6452-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected...

Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite

...

OESA-2023-1874 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

The vulnerability of the Vim text editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Use After Free

Vim is vulnerable to Heap Based Use After Free. The vulnerability is caused when executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part causing a free-ing of the memory because of recursive :s call which may later be accessed by the initia...