PT-2022-5349 · Vim +8 · Vim +8

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.0805 Description: A vulnerability was found in the function qf update buffer of the file quickfix.c of the component autocmd Handler, which leads to use after free. The attack may be launched remotely, potentially...

Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID:CVE-2021-38185 DESCRIPTION: GNU cpio could allow a remote attacker to execute arbitrary code on the system, caused by an integer...

OESA-2022-1999 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing.It is an improved version of the vi editor distributed with most UNIX systems. Securit...

Low: vim

Issue Overview: A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened in vim. CVE-2022-2257 A heap buffer overflow vulnerability was found in Vim's inc...

Amazon Linux 2 : vim (ALAS-2022-1868)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1868 advisory. A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened i...

Low: vim

Issue Overview: A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened in vim. CVE-2022-2257 A heap buffer overflow vulnerability was found in Vim's inc...

Amazon Linux AMI : vim (ALAS-2022-1639)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1639 advisory. A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened in...

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-155 advisory. A use-after-free vulnerability was found in vim's docmdline function of the src/exdocmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker t...

Use After Free in function qf_get_curlist

Description Use After Free in function qfgetcurlist at quickfix.c:1932 . vim version git log commit bf72e0c67f26ea7c8fd941fdd1533c24c7b6cb43 grafted, HEAD - master, tag: v9.0.0792, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/fuzz/test/poc14huaf.dat...

PT-2022-7576 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.0.0804 Description: The issue is related to incorrect numerical computations when handling floating-point values in the num divide function of the Vim text editor. This can allow an attacker to access confidential data...

Fedora: Security Advisory for vim (FEDORA-2022-fff548cfab)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-3352 affecting package vim for versions less than 9.0.0614-1

CVE-2022-3352 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3296 affecting package vim for versions less than 9.0.0614-1

CVE-2022-3296 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3278 affecting package vim for versions less than 9.0.0614-1

CVE-2022-3278 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3256 affecting package vim for versions less than 9.0.0614-1

CVE-2022-3256 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3324 affecting package vim for versions less than 9.0.0614-1

CVE-2022-3324 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3297 affecting package vim for versions less than 9.0.0614-1

CVE-2022-3297 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

PT-2022-7599 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.0789 Description: The issue is related to a Use After Free vulnerability in the buffer.c component of the Vim text editor. This vulnerability allows an attacker to access confidential data, compromise data integrity,...

Fedora: Security Advisory for vim (FEDORA-2022-40161673a3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...